TI-2024-35789 CVE-2024-53386 · GHSA-fp3m-g5rc-4c28Code injection in Piqnt Stage.jsPriority MEDIUM 60Stage.js through 0.8.10 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-inject…CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0025 · Published 2025-03-03 · No fix listed CWE-94