Lucene search
GoogleOSV:GHSA-R96P-V3CR-GFV8HistoryApr 13, 2021 - 3:28 p.m.
Cross-site Scripting (XSS) in @scullyio/scully
2021-04-1315:28:01
Google
osv.dev
10
cross-site scripting
scullyio
package
serialised
json.stringify()
html page
software
EPSS
0.001
Percentile
36.1%
This affects the package @scullyio/scully before 1.0.9. The transfer state is serialised with the JSON.stringify() function and then written into the HTML page.
Related
nvd
nvd
CVE-2020-28470
2021-01-14 10:15:13
veracode
veracode
Cross-Site Scripting (XSS)
2021-01-15 05:30:30
prion
prion
Design/Logic Flaw
2021-01-14 10:15:00
github
github
Cross-site Scripting (XSS) in @scullyio/scully
2021-04-13 15:28:01
cvelist
cvelist
CVE-2020-28470 Cross-site Scripting (XSS)
2021-01-14 09:35:14
cve
cve
CVE-2020-28470
2021-01-14 10:15:13