Lucene search

K
nodejsAnonymousNODEJS:1703
HistoryMay 10, 2021 - 6:51 p.m.

Cross-Site Scripting

2021-05-1018:51:17
Anonymous
www.npmjs.com
24

0.001 Low

EPSS

Percentile

43.3%

Overview

Insufficient validation in cross-origin communication (postMessage) in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks.

Recommendation

Upgrade to version 3.9.2 or later

References

CPENameOperatorVersion
reveal.jslt3.9.2

0.001 Low

EPSS

Percentile

43.3%