6 matches found
CVE-2022-0437
Cross-site Scripting XSS - DOM in NPM karma prior to 6.3.14...
6.1CVSS6AI score0.15054EPSS
SaveExploits1References1
CVE-2022-0437
Cross-site Scripting XSS - DOM in NPM karma prior to 6.3.14...
6.1CVSS0.15054EPSS
SaveExploits1References2
Cross site scripting
Cross-site Scripting XSS - DOM in NPM karma prior to 6.3.14...
4.3CVSS5.9AI score0.15054EPSS
SaveExploits1References2Affected Software1
CVE-2022-0437
Summary: The CVE-2022-0437 issue affects the karma-runner project (NPM package karma) prior to 6.3.14, with a DOM-based cross-site scripting vulnerability in the client-side DOM. The underlying cause is a DOM-based XSS condition that could allow arbitrary JavaScript execution in the victim’s brow...
6.1CVSS5.5AI score0.15054EPSS
SaveExploits1References2Affected Software1
20