Lucene search
GoogleOSV:CVE-2020-7750HistoryOct 21, 2020 - 5:15 p.m.
CVE-2020-7750
2020-10-2117:15:13
Google
osv.dev
4
This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008. The loadString function does not escape SVG properly, which can be used to inject arbitrary elements into the DOM via the _transformMeasurements function.
Related
osv
osv
Cross-Site Scripting in scratch-svg-renderer
2020-11-09 14:21:17
prion
prion
Code injection
2020-10-21 17:15:00
cvelist
cvelist
CVE-2020-7750 Cross-site Scripting (XSS)
2020-10-21 00:00:00
zdt
zdt
cve
cve
CVE-2020-7750
2020-10-21 17:15:13
nvd
nvd
CVE-2020-7750
2020-10-21 17:15:13
nodejs
nodejs
Cross-Site Scripting in scratch-svg-renderer
2020-11-09 14:24:31
githubexploit
githubexploit
Exploit for Cross-site Scripting in Mit Scratch-Svg-Renderer
2020-12-08 13:40:01
github
github
Cross-Site Scripting in scratch-svg-renderer
2020-11-09 14:21:17
packetstorm
packetstorm
Scratch Desktop 3.17 Code Execution / Cross Site Scripting
2021-07-02 00:00:00
exploitdb
exploitdb
Scratch Desktop 3.17 - Remote Code Execution
2021-07-02 00:00:00