UBUNTU-CVE-2020-15676

Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting attacker-controlled data into a contenteditable element. This vulnerability affects Firefox 81, Thunderbird 78.3, and Firefox ESR 78.3...

CVE-2020-15676

Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting attacker-controlled data into a contenteditable element. This vulnerability affects Firefox 81, Thunderbird 78.3, and Firefox ESR 78.3...

Cross-site Scripting (XSS)

Firefox is vulnerable to cross-site scripting XSS. It sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting attacker-controlled data into a contenteditable element...

Mozilla: XSS when pasting attacker-controlled data into a contenteditable element

The Mozilla Foundation Security Advisory describes this flaw as: Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting attacker-controlled data into a contenteditable element...

CVE-2020-15676

The Mozilla Foundation Security Advisory describes this flaw as: Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting attacker-controlled data into a contenteditable element...

PT-2020-14580

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 81 Thunderbird versions prior to 78.3 Firefox ESR versions prior to 78.3 Description The issue arises when Firefox sometimes runs the onload handler for SVG elements that the DOM sanitizer has decided to remove. This...

Security Vulnerabilities fixed in Firefox ESR 78.3 — Mozilla

By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the download file dialog to show the original site the one suffering from the open redirect rather than the site the file was actually downloaded from. Firefox sometimes ran the onload...

@mlshv/modern-koa-docs (3.0.2), bootstrap-mithril (>=1.0.4-alpha.0, <=1.0.5-alpha.0) +26 more potentially affected by unknown CVE via mithril (>=1.0.0, <=1.1.6)

mithril NPM version =1.0.0, =1.0.4-alpha.0, =1.0.4-alpha.0, =1.0.4-alpha.0, =1.0.4-alpha.0, =1.0.4-alpha.1, =1.0.4-alpha.0, =0.6.0, =1.0.0-alpha.2, =1.0.0-alpha.2, =0.2.0, =0.1.0, =1.0.1-5, =0.3.0, =0.3.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-C3PX-V9C7-M734...