CVE-2020-7747
This affects all versions of package lightning-server. It is possible to inject malicious JavaScript code as part of a session controller.
6.3CVSS
6.3AI Score
0.001EPSS