Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

DOM Clobbering

🗓️ 07 Mar 2025 05:26:15Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 7 Views

PrismJS is vulnerable to DOM Clobbering, risking Cross-Site Scripting via injected HTML elements.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: IBM Security QRadar Log Management AQL Plugin includes components with known vulnerabilities
20 Oct 202520:06
–ibm
IBM Security Bulletins		Security Bulletin: IBM Security SOAR is using a component with a known vulnerability [CVE-2024-53382]
30 May 202513:02
–ibm
IBM Security Bulletins		Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities
29 Apr 202519:38
–ibm
IBM Security Bulletins		Security Bulletin: IBM watsonx Code Assistant IDE Extensions affected by prismjs Cross-Site Scripting vulnerability
24 Jun 202510:52
–ibm
IBM Security Bulletins		Security Bulletin: There is a vulnerability in prismjs-1.23.0.tgz used by IBM Maximo Manage application in IBM Maximo Application Suite ( CVE-2021-32723)
5 May 202606:18
–ibm
IBM Security Bulletins		Security Bulletin: IBM Maximo Application Suite uses jinja2-3.1.5-py3-none-any.whl and prismjs-1.29.0.tgz which is vulnerable to CVE-2025-27516 and CVE-2024-53382 This bulletin contains information regarding the vulnerability and its fixture.
25 Jun 202508:00
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.
18 Aug 202504:29
–ibm
IBM Security Bulletins		Security Bulletin: There is a vulnerability in prism-1.28.0.jsused by IBM Maximo Asset Management application ( CVE-2024-53382)
26 Jun 202505:48
–ibm
IBM Security Bulletins		Security Bulletin: IBM Storage Ceph is vulnerable to Code Injection in Grafana (CVE-2024-53382)
7 Jul 202519:57
–ibm
IBM Security Bulletins		Security Bulletin: IBM Security QRadar EDR Software contains multiple vulnerabilities
11 Jun 202513:20
–ibm
Rows per page
Vulners
Node
prismjsprismjsRange1.0.0–1.29.0js
OR
webjarsprismjsRange1.6.0–1.29.0js
OR
prismjsprismjsRange0.0.1–9000.0.1js
OR
prismjsprismjsRange1.0.0–1.16.0js

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
27 Jun 2025 14:37Current
6.3Medium risk
Vulners AI Score6.3
CVSS 3.14.9 - 5.4
EPSS0.00158
SSVC
vulnerabilitydom clobberingcross-site scriptingprismjsattacker-injected html
7