A DOM-based cross-site scripting (XSS) vulnerability in Scratch-Svg-Renderer v0.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted sb3 file.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2022-01-05T23:37:45
Updated: 2024-08-04T16:18:43.460Z
Reserved: 2020-10-21T00:00:00
Link: CVE-2020-27428
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-01-06T00:15:07.790
Modified: 2024-11-21T05:21:13.017
Link: CVE-2020-27428
Redhat
No data.