CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Github Security Blog•added 2021/04/13 3:19 p.m.•59 views

Cross-site Scripting in vis-timeline

This affects the package vis-timeline before 7.4.4. An attacker with the ability to control the items of a Timeline element can inject additional script code into the generated application...

6.8CVSS6.5AI score0.01444EPSS

SaveExploits1References8Affected Software1

OSV•added 2021/01/22 6:15 p.m.•21 views

CVE-2020-28487

This affects the package vis-timeline before 7.4.4. An attacker with the ability to control the items of a Timeline element can inject additional script code into the generated application...

6.8CVSS6.8AI score

SaveExploits0References5

Cvelist•added 2021/01/22 5:15 p.m.•53 views

CVE-2020-28487 Cross-site Scripting (XSS)

This affects the package vis-timeline before 7.4.4. An attacker with the ability to control the items of a Timeline element can inject additional script code into the generated application...

6.8CVSS6.6AI score0.01444EPSS

SaveExploits1References5

Rapid7 Vulnerability Database (full)•added 2021/01/22 12:00 a.m.•4 views

CVE-2020-28487: Improper Neutralization of Input During Web Page Generation

This affects the package vis-timeline before 7.4.4. An attacker with the ability to control the items of a Timeline element can inject additional script code into the generated application...

6.8CVSS5.8AI score0.01444EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by