Prismjs Previewers vulnerabilities

1 known vulnerability affecting prismjs/previewers.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2020-15138HIGHCVSS 7.5≥ 1.1.0, < 1.21.02020-08-07

CVE-2020-15138 [HIGH] CWE-79 CVE-2020-15138: Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism >=v1.1.0 that use the _Previewers_ plugin (>=v1.10.0) or the _Previewer: Easing_ plugin (v1.1.0 to