CVE-2020-8127

Insufficient validation in cross-origin communication postMessage in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks...

Cross-Site Scripting

Overview Insufficient validation in cross-origin communication postMessage in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks. Recommendation Upgrade to version 3.9.2 or later References - CVE - GitHub Advisory...

@asciidoctor/reveal.js (>=3.0.0-rc1, <=3.1.0), ace-technical-sharing-serverless-by-joseph (1.0.1) +16 more potentially affected by CVE-2020-8127 via reveal.js (>=3.0.0, <=3.8.0)

reveal.js NPM version =3.0.0, =3.0.0-rc1, =1.1.0, =0.0.31, =1.0.0, =1.0.4, =0.0.1, =0.0.0, =0.1.0, =0.0.14, =0.1.2, =0.0.1, =0.0.15 and more Source cves: CVE-2020-8127 Source advisory: OSV:GHSA-6VWX-MWP8-FH44...

CVE-2020-8127

Insufficient validation in cross-origin communication postMessage in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks...

CVE-2020-8127

CVE-2020-8127 affects reveal.js 3.9.1 and earlier, where insufficient validation in cross-origin postMessage enables cross-site scripting. Impact is limited to affected reveal.js usage; exploits are not detailed here. Remediation: upgrade to reveal.js 3.9.2 or later. This vulnerability is confirm...

CVE-2020-8127

Insufficient validation in cross-origin communication postMessage in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks...