Alexis H. Munsayac seroval improper output handling vulnerability

Versions prior to 1.0.0 and versions 1.5.5 through 1.6.10 of Alexis H. Munsayac contain a security vulnerability. This vulnerability arises because the JavaScript output API fails to escape HTML script elements when serializing source code containing a minus sign. When an application uses untrust...

Alexis H. Munsayac cross-site scripting vulnerability

A security vulnerability exists in Alexis H. Munsayac version 1.6.0 through 1.6.11. This vulnerability arises because the JavaScript output API derives constructor names from properties of typed array values. Attackers can inject executable JavaScript by replacing the constructor property. When...