GHSA-9mrv-456v-pf22MediumCVSS 6.8

Cross-site Scripting in vis-timeline

Published
April 13, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2020-28487 →

📋 Description

This affects the package vis-timeline before 7.4.4. An attacker with the ability to control the items of a Timeline element can inject additional script code into the generated application.

🎯 Affected products1

  • npm/vis-timeline:< 7.4.4

🔗 References (8)