CVE-2021-33040

2022-01-1717:15:00

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.8%

JSON

managers/views/iframe.js in FuturePress EPub.js before 0.3.89 allows XSS.

CPENameOperatorVersion
epub.jseq0.2.5
epub.jseq0.2.12
epub.jseqalpha-0.3.1
epub.jseq0.1.8
epub.jseq0.2.7
epub.jseq0.1.7
epub.jseq0.3.88
epub.jseq0.2.11
epub.jseq0.2.9
epub.jseq0.2.8

Name	Operator	Version
epub.js	eq	0.2.5
epub.js	eq	0.2.12
epub.js	eq	alpha-0.3.1
epub.js	eq	0.1.8
epub.js	eq	0.2.7
epub.js	eq	0.1.7
epub.js	eq	0.3.88
epub.js	eq	0.2.11
epub.js	eq	0.2.9
epub.js	eq	0.2.8

Rows per page:

1-10 of 301

References

github.com/futurepress/epub.js/blob/5c7f21d648d9d20d44c6c365d164b16871847023/src/managers/views/iframe.js#L373

github.com/futurepress/epub.js/commit/ab4dd46408cce0324e1c67de4a3ba96b59e5012e

github.com/futurepress/epub.js/compare/v0.3.88...v0.3.89