Skip to content

Instantly share code, notes, and snippets.

@cd80

cd80/gist:44d2d0785af352bf41676b0f545faf89

Last active February 14, 2024 07:21
Show Gist options
  • Save cd80/44d2d0785af352bf41676b0f545faf89 to your computer and use it in GitHub Desktop.
Save cd80/44d2d0785af352bf41676b0f545faf89 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
- CVE ID
CVE-2024-24055
- Name of affected product and versions
https://github.com/anuraghazra/Verly.js
version <= v1.3.0
- Problem type
Attacker can execute arbitrary javascript code in victim's browser by sending specifically crafted url that exploits DOM based XSS in /index.js.
- Description
Cross Site Scripting (XSS) vulnerability in the component /index.js of github repository anuraghazra/Verly.js allows attackers to execute arbitrary javascript code via sending a crafted URL to a victim.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment