Lucene search
GoogleOSV:CVE-2020-7642HistoryApr 22, 2020 - 4:15 p.m.
CVE-2020-7642
2020-04-2216:15:13
Google
osv.dev
3
lazysizes through 5.2.0 allows execution of malicious JavaScript. The following attributes are not sanitized by the video-embed plugin: data-vimeo, data-vimeoparams, data-youtube and data-ytparams which can be abused to inject malicious JavaScript.
Related
osv
osv
Cross-site scripting in lazysizes
2021-12-10 20:06:23
github
github
Cross-site scripting in lazysizes
2021-12-10 20:06:23
nvd
nvd
CVE-2020-7642
2020-04-22 16:15:13
cvelist
cvelist
CVE-2020-7642
2020-04-22 15:13:51
prion
prion
Design/Logic Flaw
2020-04-22 16:15:00
veracode
veracode
Cross-Site Scripting (XSS)
2020-03-10 02:51:53
cve
cve
CVE-2020-7642
2020-04-22 16:15:13