Lucene search
GoogleOSV:CVE-2020-28487HistoryJan 22, 2021 - 6:15 p.m.
CVE-2020-28487
2021-01-2218:15:12
Google
osv.dev
4
vulnerability
vis-timeline
package
script injection
timeline element
software
This affects the package vis-timeline before 7.4.4. An attacker with the ability to control the items of a Timeline element can inject additional script code into the generated application.
Related
cve
cve
CVE-2020-28487
2021-01-22 18:15:12
nvd
nvd
CVE-2020-28487
2021-01-22 18:15:12
prion
prion
Design/Logic Flaw
2021-01-22 18:15:00
veracode
veracode
Cross-Site Scripting (XSS)
2021-01-25 06:33:12
cvelist
cvelist
CVE-2020-28487 Cross-site Scripting (XSS)
2021-01-22 17:15:20
github
github
Cross-site Scripting in vis-timeline
2021-04-13 15:19:50
osv
osv
Cross-site Scripting in vis-timeline
2021-04-13 15:19:50