Lucene search
Veracode Vulnerability DatabaseVERACODE:29138HistoryJan 25, 2021 - 6:33 a.m.
Cross-Site Scripting (XSS)
2021-01-2506:33:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.002 Low
EPSS
Percentile
52.6%
vis-timeline is vulnerable to cross-site scripting. An attacker is able to inject malicious code into the innerHTML property element.
| CPE | Name | Operator | Version |
|---|---|---|---|
| vis-timeline | le | 7.4.3 | |
| vis-timeline | eq | 7.3.7 |
Related
prion
prion
Design/Logic Flaw
2021-01-22 18:15:00
cvelist
cvelist
CVE-2020-28487 Cross-site Scripting (XSS)
2021-01-22 00:00:00
github
github
Cross-site Scripting in vis-timeline
2021-04-13 15:19:50
osv
osv
Cross-site Scripting in vis-timeline
2021-04-13 15:19:50
CVE-2020-28487
2021-01-22 18:15:12
cve
cve
CVE-2020-28487
2021-01-22 18:15:12
nvd
nvd
CVE-2020-28487
2021-01-22 18:15:12