9 matches found
GHSA-VRC7-6G8W-JH56 Improper Input Validation in xdLocalStorage
An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage function in xdLocalStoragePostMessageApi.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue to impact the...
CVE-2015-9544
An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage function in xdLocalStoragePostMessageApi.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue to impact the...
CVE-2015-9544
An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage function in xdLocalStoragePostMessageApi.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue to impact the...
CVE-2015-9544
An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage function in xdLocalStoragePostMessageApi.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue to impact the...
CVE-2015-9545
An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage function in xdLocalStorage.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue to impact the confidentiality and...
PT-2020-7915
Name of the Vulnerable Software and Affected Versions: xdLocalStorage versions 2.0.5 and earlier Description: An issue was discovered in the receiveMessage function in xdLocalStoragePostMessageApi.js, which does not implement any validation of the origin of web messages. Remote attackers who can...
CVE-2015-9545: Improper Input Validation
An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage function in xdLocalStorage.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue to impact the confidentiality and...
PT-2020-7916
Name of the Vulnerable Software and Affected Versions: xdLocalStorage versions 2.0.5 and earlier Description: An issue was discovered in the receiveMessage function in xdLocalStorage.js, which does not implement any validation of the origin of web messages. Remote attackers who can entice a user ...
CVE-2015-9544: Improper Input Validation
An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage function in xdLocalStoragePostMessageApi.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue to impact the...