Количество 2
Количество 2
CVE-2020-7741
больше 5 лет назад
This affects the package hellojs before 1.18.6. The code get the param oauth_redirect from url and pass it to location.assign without any check and sanitisation. So we can simply pass some XSS payloads into the url param oauth_redirect, such as javascript:alert(1).
CVSS3: 9.9
EPSS: Низкий
GHSA-7jh9-6cpf-h4m7
около 5 лет назад
XSS in hello.js
CVSS3: 9.9
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-7741 This affects the package hellojs before 1.18.6. The code get the param oauth_redirect from url and pass it to location.assign without any check and sanitisation. So we can simply pass some XSS payloads into the url param oauth_redirect, such as javascript:alert(1). | CVSS3: 9.9 | 1% Низкий | больше 5 лет назад |
| GHSA-7jh9-6cpf-h4m7 XSS in hello.js | CVSS3: 9.9 | 1% Низкий | около 5 лет назад |
Уязвимостей на страницу
20