4 matches found
MINI-W9CH-87HQ-J977
Bulletin has no description...
5.7AI score
SaveExploits0
MINI-V58P-3VC7-J977
Bulletin has no description...
7.5CVSS5.8AI score0.00781EPSS
SaveExploits0
MINI-J977-GXR9-7M6P
Bulletin has no description...
6.1CVSS5.7AI score0.0029EPSS
SaveExploits0
Cross-Site Scripting in scratch-svg-renderer
Overview This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008. The loadString function does not escape SVG properly, which can be used to inject arbitrary elements into the DOM via the transformMeasurements function. Recommendation Upgrade to version...
6.8CVSS3.2AI score0.06148EPSS
SaveExploits3Affected Software1
20