2 matches found
CVE-2024-26465
A DOM based cross-site scripting XSS vulnerability in the component /beep/Beep.Instrument.js of stewdio beep.js before commit ef22ad7 allows attackers to execute arbitrary Javascript via sending a crafted URL...
6.1CVSS6AI score0.00425EPSS
SaveExploits0References1
CVE-2024-26465
A DOM-based cross-site scripting (XSS) vulnerability exists in the stwdio beep.js JavaScript toolkit (a browser-based synthesizer builder). The flaw is located in the /beep/Beep.Instrument.js component and affects versions prior to commit ef22ad7 . Attackers can exploit this by sending a speciall...
6.1CVSS6AI score0.00425EPSS
SaveExploits0References1
20