Lucene search
Veracode Vulnerability DatabaseVERACODE:33562HistoryJan 07, 2022 - 2:40 p.m.
Cross-site Scripting (XSS)
2022-01-0714:40:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
31.3%
scratch-svg-renderer is vulnerable to cross-site scripting. An attacker is able to inject maliciously crafted sb3 file via the HTML DOM object model interface.
| CPE | Name | Operator | Version |
|---|---|---|---|
| scratch-svg-renderer | le | 0.2.0-.20210727010830 | |
| scratch-svg-renderer | le | 0.2.0-.20210727010830 |
Related
nvd
nvd
CVE-2020-27428
2022-01-06 00:15:07
osv
osv
Cross-site Scripting in Scratch-Svg-Renderer
2022-01-08 00:44:33
CVE-2020-27428
2022-01-06 00:15:07
cnvd
cnvd
scratch-svg-renderer cross-site scripting vulnerability
2022-01-10 00:00:00
cve
cve
CVE-2020-27428
2022-01-06 00:15:07
cvelist
cvelist
CVE-2020-27428
2022-01-05 23:37:45
prion
prion
Cross site scripting
2022-01-06 00:15:00
github
github
Cross-site Scripting in Scratch-Svg-Renderer
2022-01-08 00:44:33