Insufficient validation in cross-origin communication (postMessage) in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://hackerone.com/reports/691977 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: hackerone
Published: 2020-02-28T19:25:46
Updated: 2024-08-04T09:48:25.585Z
Reserved: 2020-01-28T00:00:00
Link: CVE-2020-8127
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2020-02-28T20:15:11.537
Modified: 2020-03-03T21:30:53.703
Link: CVE-2020-8127
Redhat
No data.