Lucene search

K
osvGoogleOSV:GHSA-6VWX-MWP8-FH44
HistoryMay 10, 2021 - 6:47 p.m.

Cross-site Scripting in reveal.js

2021-05-1018:47:10
Google
osv.dev
13

0.001 Low

EPSS

Percentile

43.3%

Insufficient validation in cross-origin communication (postMessage) in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks.

CPENameOperatorVersion
reveal.jslt3.9.2

0.001 Low

EPSS

Percentile

43.3%