← CVE Intelligence

CVE-2020-28470

Cross-site Scripting (XSS) PUBLISHED

Description (CNA)

This affects the package @scullyio/scully before 1.0.9. The transfer state is serialised with the JSON.stringify() function and then written into the HTML page.

Affected (CNA)

Vendor / productVersions
n/a / @scullyio/scullyaffected unspecified before 1.0.9

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.