TI-2022-00685 CVE-2022-0776 · GHSA-hhqj-cfjx-vj25
Cross-site Scripting (XSS) - DOM in hakimel/reveal.js
Priority LOW 34
Cross-site Scripting (XSS) - DOM in GitHub repository hakimel/reveal.js prior to 4.3.0.
Revealjs
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Revealjs records in CISA KEVNo Revealjs vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2020-06545 CVE-2020-8127 · GHSA-6vwx-mwp8-fh44
Cross-site scripting in reveal.js
Priority LOW 30
Insufficient validation in cross-origin communication (postMessage) in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks.