CVE-2020-8127

2020-02-2820:15:11

Google

osv.dev

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.3%

JSON

Insufficient validation in cross-origin communication (postMessage) in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks.

CPENameOperatorVersion
reveal.jseq1.2.0
reveal.jseq3.7.0
reveal.jseq2.6.0
reveal.jseq2.3.0
reveal.jseq2.5.0
reveal.jseq3.9.1
reveal.jseq3.0.0
reveal.jseq1.1.0
reveal.jseq3.6.0
reveal.jseq0.3.0

Name	Operator	Version
reveal.js	eq	1.2.0
reveal.js	eq	3.7.0
reveal.js	eq	2.6.0
reveal.js	eq	2.3.0
reveal.js	eq	2.5.0
reveal.js	eq	3.9.1
reveal.js	eq	3.0.0
reveal.js	eq	1.1.0
reveal.js	eq	3.6.0
reveal.js	eq	0.3.0