CVE-2024-53387

A DOM Clobbering vulnerability in umeditor v1.2.3 allows attackers to execute arbitrary code via supplying a crafted HTML element...

CVE-2024-53384

A DOM Clobbering vulnerability in tsup v8.3.4 allows attackers to execute arbitrary code via a crafted script in the import.meta.url to document.currentScript in cjsshims.js components...

PT-2025-9515

Name of the Vulnerable Software and Affected Versions umeditor version 1.2.3 Description A DOM Clobbering issue allows attackers to execute arbitrary code by supplying a crafted HTML element. Recommendations For umeditor version 1.2.3, update to a version that fixes this issue, as no specific...

PT-2025-9528

Name of the Vulnerable Software and Affected Versions tsup version 8.3.4 Description A DOM Clobbering issue allows attackers to execute arbitrary code via a crafted script in the import.meta.url to document.currentScript in cjs shims.js components. Recommendations For tsup version 8.3.4, at the...

CVE-2024-53387: Improper Neutralization of Input During Web Page Generation

A DOM Clobbering vulnerability in umeditor v1.2.3 allows attackers to execute arbitrary code via supplying a crafted HTML element...

CVE-2024-53386: Improper Control of Generation of Code

Stage.js through 0.8.10 allows DOM Clobbering with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript, because document.currentScript lookup can be shadowed by attacker-injected HTML elements...

CVE-2024-53382: Improper Control of Generation of Code

Prism aka PrismJS through 1.29.0 allows DOM Clobbering with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript, because document.currentScript lookup can be shadowed by attacker-injected HTML elements...

CVE-2024-53382

Prism aka PrismJS through 1.29.0 allows DOM Clobbering with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript, because document.currentScript lookup can be shadowed by attacker-injected HTML elements...

CVE-2024-53384

A DOM Clobbering vulnerability in tsup v8.3.4 allows attackers to execute arbitrary code via a crafted script in the import.meta.url to document.currentScript in cjsshims.js components...

CVE-2024-53386

Stage.js through 0.8.10 allows DOM Clobbering with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript, because document.currentScript lookup can be shadowed by attacker-injected HTML elements...

CVE-2024-53386

Stage.js through 0.8.10 allows DOM Clobbering with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript, because document.currentScript lookup can be shadowed by attacker-injected HTML elements...

CVE-2024-53382

Prism aka PrismJS through 1.29.0 allows DOM Clobbering with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript, because document.currentScript lookup can be shadowed by attacker-injected HTML elements...

CVE-2024-53382

Prism aka PrismJS through 1.29.0 allows DOM Clobbering with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript, because document.currentScript lookup can be shadowed by attacker-injected HTML elements...

CVE-2024-53388

The mavo v0.3.2 web application platform is vulnerable to DOM Clobbering due to improper handling of HTML elements and a lack of measures to protect the website structure. A remote attacker can exploit this by supplying a crafted HTML element to inject malicious code and execute arbitrary code or...

CVE-2024-53388

A DOM Clobbering vulnerability in mavo v0.3.2 allows attackers to execute arbitrary code via supplying a crafted HTML element...

CVE-2024-53384: Improper Neutralization of Input During Web Page Generation

A DOM Clobbering vulnerability in tsup v8.3.4 allows attackers to execute arbitrary code via a crafted script in the import.meta.url to document.currentScript in cjsshims.js components...

UMeditor 跨站脚本漏洞

UMeditor is a rich text editor from the Baidu FEX team. A security vulnerability exists in UMeditor version v1.2.3, which stems from DOM Clobbering and allows execution of arbitrary code via specially crafted HTML elements...

CVE-2024-53388: Improper Neutralization of Input During Web Page Generation

A DOM Clobbering vulnerability in mavo v0.3.2 allows attackers to execute arbitrary code via supplying a crafted HTML element...

PT-2025-9516

Name of the Vulnerable Software and Affected Versions mavo version 0.3.2 Description A DOM Clobbering issue allows attackers to execute arbitrary code by supplying a crafted HTML element. Recommendations For mavo version 0.3.2, at the moment, there is no information about a newer version that...

CVE-2024-13901

The Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘content’ parameter in all versions up to, and including, 2.0.6 due to insufficient input sanitization and output escaping. This...