5 matches found
@asciidoctor/reveal.js (>=5.0.0-rc.1, <=5.0.1), hapi-reveal (4.0.0) +1 more potentially affected by CVE-2022-0776 via reveal.js (>=4.0.2, <=4.2.1)
reveal.js NPM version =4.0.2, =5.0.0-rc.1, =4.0.0-beta.0, =5.3.2 Source cves: CVE-2022-0776 Source advisory: OSV:GHSA-HHQJ-CFJX-VJ25...
CVE-2022-0776
Cross-site Scripting XSS - DOM in GitHub repository hakimel/reveal.js prior to 4.3.0...
CVE-2022-0776 Cross-site Scripting (XSS) - DOM in hakimel/reveal.js
Cross-site Scripting XSS - DOM in GitHub repository hakimel/reveal.js prior to 4.3.0...
CVE-2022-0776
The CVE-2022-0776 issue affects reveal.js prior to version 4.3.0 and is described as a DOM-based Cross-Site Scripting (XSS) vulnerability that can be exposed via postMessage handling. Multiple connected sources confirm the vulnerability stems from insufficient input validation/output in Reveal.js...
