Lucene search
Veracode Vulnerability DatabaseVERACODE:34475HistoryMar 02, 2022 - 4:02 a.m.
Cross-site Scripting (XSS)
2022-03-0204:02:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
0.001 Low
EPSS
Percentile
41.7%
reveal.js is vulnerable to cross-site scripting. The onmessage event listener in speaker-view.html does not properly check the origin of postMessage before being rendered on the webpage, allowing an attacker to inject and execute malicious javascript.
Related
cve
cve
CVE-2022-0776
2022-03-01 09:15:07
huntr
huntr
Cross-site Scripting (XSS) - DOM in hakimel/reveal.js
2022-02-04 21:53:13
nuclei
nuclei
RevealJS postMessage <4.3.0 - Cross-Site Scripting
2022-05-29 10:39:24
osv
osv
CVE-2022-0776
2022-03-01 09:15:07
Cross site scripting in reveal.js
2022-03-02 00:00:20
github
github
Cross site scripting in reveal.js
2022-03-02 00:00:20
prion
prion
Cross site scripting
2022-03-01 09:15:00
cvelist
cvelist
CVE-2022-0776 Cross-site Scripting (XSS) - DOM in hakimel/reveal.js
2022-03-01 08:40:09
nvd
nvd
CVE-2022-0776
2022-03-01 09:15:07