CVE-2021-33040

managers/views/iframe.js in FuturePress EPub.js before 0.3.89 allows XSS...

@loopspeed/epubjs-rn (>=0.2.38 <=0.2.77), @muriloneo/epubjs-rn (=0.2.37) +8 more potentially affected by CVE-2021-33040 via epubjs (>=0.2.21 <=0.3.88)

epubjs NPM version =0.2.21, =0.2.38, =0.3.25, =0.2.33, =0.2.5, =0.1.0, =0.0.9, =0.2.37, =0.13.1, =0.13.2 - unext-epub-viewer =1.0.0 Source cves: CVE-2021-33040 Source advisory: OSV:GHSA-C6RP-XVQV-MWMF...

CVE-2021-33040

creationtimestamp| type| source ---|---|--- 2022-01-17 20:23:30+00:00| seen| https://t.me/cibsecurity/35679...

CVE-2021-33040

CVE-2021-33040 affects FuturePress EPub.js (prior to v0.3.89). The vulnerability is a XSS in managers/views/iframe.js due to insufficient escaping of user-submitted data. Used in the EPUB rendering library; impact is cross-site scripting. Public references indicate the fix is in v0.3.89 (upstream...