6 matches found
CVE-2025-25300
smartbanner.js is a customizable smart app banner for iOS and Android. Prior to version 1.14.1, clicking on smartbanner View link and navigating to 3rd party page leaves window.opener exposed. It may allow hostile third parties to abuse window.opener, e.g. by redirection or injection on the...
CVE-2025-25300
creationtimestamp| type| source ---|---|--- 2025-02-18 18:16:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihull4ful23 2025-02-18 20:59:48+00:00| seen| https://t.me/cvedetector/18349 2025-02-18 21:56:19+00:00| seen|...
CVE-2025-25300
smartbanner.js is a customizable smart app banner for iOS and Android. Prior to version 1.14.1, clicking on smartbanner View link and navigating to 3rd party page leaves window.opener exposed. It may allow hostile third parties to abuse window.opener, e.g. by redirection or injection on the...
CVE-2025-25300 smartbanner.js rel noopener XSS vulnerability
smartbanner.js is a customizable smart app banner for iOS and Android. Prior to version 1.14.1, clicking on smartbanner View link and navigating to 3rd party page leaves window.opener exposed. It may allow hostile third parties to abuse window.opener, e.g. by redirection or injection on the...
CVE-2025-25300 smartbanner.js rel noopener XSS vulnerability
smartbanner.js is a customizable smart app banner for iOS and Android. Prior to version 1.14.1, clicking on smartbanner View link and navigating to 3rd party page leaves window.opener exposed. It may allow hostile third parties to abuse window.opener, e.g. by redirection or injection on the...
@alv-ch/alv-styleguide (>=0.0.1-1.alpha, <=0.1.8), @alv-ch/cms-styleguide (>=0.0.1, <=1.0.1) potentially affected by CVE-2025-25300 via smartbanner.js (1.7.0)
smartbanner.js NPM version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on smartbanner.js and may be impacted: - @alv-ch/alv-styleguide =0.0.1-1.alpha, =0.0.1, =1.0.1 Source cves: CVE-2025-25300 Source advisory: OSV:GHSA-9MRQ-CJGH-32G2...