Количество 5
Количество 5
CVE-2024-53382
Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.
CVE-2024-53382
Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.
CVE-2024-53382
Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.
CVE-2024-53382
Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resulta ...
GHSA-x7hr-w5r2-h6wg
PrismJS DOM Clobbering vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-53382 Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements. | CVSS3: 4.9 | 0% Низкий | больше 1 года назад |
 | CVE-2024-53382 Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements. | CVSS3: 4.9 | 0% Низкий | больше 1 года назад |
 | CVE-2024-53382 Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements. | CVSS3: 4.9 | 0% Низкий | больше 1 года назад |
| CVE-2024-53382 Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resulta ... | CVSS3: 4.9 | 0% Низкий | больше 1 года назад |
| GHSA-x7hr-w5r2-h6wg PrismJS DOM Clobbering vulnerability | CVSS3: 4.9 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу