2 matches found
Cross-site Scripting in epubjs
managers/views/iframe.js in FuturePress EPub.js before 0.3.89 allows XSS...
6.1CVSS1.9AI score0.00937EPSS
SaveExploits0References5Affected Software1
Cross-site Scripting (XSS)
epubjs is vulnerable to cross-site scripting. The library does not properly sanitize the ePub content due to the insecure use of the allowScriptedContent option, which allows sandbox content to run malicious scripts...
6.1CVSS1.9AI score0.00937EPSS
SaveExploits0References4Affected Software1
20