Lucene search
Veracode Vulnerability DatabaseVERACODE:22527HistoryFeb 19, 2020 - 2:15 a.m.
Cross-Site Scripting (XSS)
2020-02-1902:15:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.001 Low
EPSS
Percentile
43.3%
reveal.js is vulnerable to cross-site scripting (XSS) attacks. It is possible because it does not restrict the data (such as code, description and callback) from arbitrary origins and allows the SetupPostMessage to invoke methods without validating the data.method against any blacklisting, directly rendering as arbitrary HTML in the function showhelp.
Related
cvelist
cvelist
CVE-2020-8127
2020-02-28 19:25:46
osv
osv
CVE-2020-8127
2020-02-28 20:15:11
Cross-site Scripting in reveal.js
2021-05-10 18:47:10
nodejs
nodejs
Cross-Site Scripting
2021-05-10 18:51:17
nvd
nvd
CVE-2020-8127
2020-02-28 20:15:11
hackerone
hackerone
cve
cve
CVE-2020-8127
2020-02-28 20:15:11
prion
prion
Cross site scripting
2020-02-28 20:15:00
github
github
Cross-site Scripting in reveal.js
2021-05-10 18:47:10