CVE-2020-28487

The CVE-2020-28487 entry affects vis-timeline (prior to 7.4.4). Affected component: Timeline items data; root cause is the ability to control Timeline items which allows injection of script code into the generated application, resulting in cross-site scripting (XSS). Impact per sources is that an...