PT-2025-9273

🗓️ 03 Mar 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

DOM Clobbering in PrismJS before 1.29.0 allows XSS through untrusted HTML input. Update required.

Reporter	Title	Published	Views	Family All 53
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Log Management AQL Plugin includes components with known vulnerabilities	20 Oct 202520:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with a known vulnerability [CVE-2024-53382]	30 May 202513:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities	29 Apr 202519:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Code Assistant IDE Extensions affected by prismjs Cross-Site Scripting vulnerability	24 Jun 202510:52	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in prismjs-1.23.0.tgz used by IBM Maximo Manage application in IBM Maximo Application Suite ( CVE-2021-32723)	5 May 202606:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses jinja2-3.1.5-py3-none-any.whl and prismjs-1.29.0.tgz which is vulnerable to CVE-2025-27516 and CVE-2024-53382 This bulletin contains information regarding the vulnerability and its fixture.	25 Jun 202508:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:29	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in prism-1.28.0.jsused by IBM Maximo Asset Management application ( CVE-2024-53382)	26 Jun 202505:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Code Injection in Grafana (CVE-2024-53382)	7 Jul 202519:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar EDR Software contains multiple vulnerabilities	11 Jun 202513:20	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2024-53382
github	www.github.com/PrismJS/prism/pull/3863
t	www.t.me/cvenotify/126873
cve	www.cve.org/CVERecord
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-53382
ubuntu	www.ubuntu.com/security/CVE-2024-53382
t	www.t.me/cvenotify/113262
osv	www.osv.dev/vulnerability/ROOT-APP-NPM-CVE-2024-53382
osv	www.osv.dev/vulnerability/GHSA-x7hr-w5r2-h6wg
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2024-53382

04 Jun 2026 00:00Current

6Medium risk

Vulners AI Score6

CVSS 3.14.9 - 5.4

EPSS0.00271

SSVC

prism software vulnerability dom clobbering xss risk untrusted input update recommendation