Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

CVE-2020-28487

Cross-site Scripting (XSS)

This affects the package vis-timeline before 7.4.4. An attacker with the ability to control the items of a Timeline element can inject additional script code into the generated application.

CVSS 3.1 · 6.8 Medium EPSS 1.5% KEV · Not listed
Vendors
Visjs
Products
Vis-timeline