What is GHSA-c6rp-xvqv-mwmf?

GHSA-c6rp-xvqv-mwmf is a security advisory published by GitHub Security Advisories with Medium severity. Cross-site Scripting in epubjs

Which CVE IDs does GHSA-c6rp-xvqv-mwmf cover?

GHSA-c6rp-xvqv-mwmf covers the following CVE IDs: CVE-2021-33040. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-c6rp-xvqv-mwmf?

GHSA-c6rp-xvqv-mwmf has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-c6rp-xvqv-mwmf?

GHSA-c6rp-xvqv-mwmf affects 1 product, including: npm/epubjs:\u003c 0.3.89.

GHSA-c6rp-xvqv-mwmfMediumCVSS 6.1

Cross-site Scripting in epubjs

Vendor

GitHub Security Advisories

Published

January 21, 2022

Last Modified

September 21, 2023

🔗 CVE IDs covered (1)

CVE-2021-33040 →

📋 Description

managers/views/iframe.js in FuturePress EPub.js before 0.3.89 allows XSS.

🎯 Affected products1

npm/epubjs:< 0.3.89

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2021-33040
https://github.com/futurepress/epub.js/commit/ab4dd46408cce0324e1c67de4a3ba96b59e5012e
https://github.com/futurepress/epub.js/blob/5c7f21d648d9d20d44c6c365d164b16871847023/src/managers/views/iframe.js#L373
https://github.com/futurepress/epub.js/compare/v0.3.88...v0.3.89
https://github.com/advisories/GHSA-c6rp-xvqv-mwmf