Vulnerability Details CVE-2021-33040
managers/views/iframe.js in FuturePress EPub.js before 0.3.89 allows XSS.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.4%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
- https://github.com/futurepress/epub.js/blob/5c7f21d648d9d20d44c6c365d164b16871847023/src/managers/views/iframe.js#L373
- https://github.com/futurepress/epub.js/commit/ab4dd46408cce0324e1c67de4a3ba96b59e5012e
- https://github.com/futurepress/epub.js/compare/v0.3.88...v0.3.89
- https://github.com/futurepress/epub.js/blob/5c7f21d648d9d20d44c6c365d164b16871847023/src/managers/views/iframe.js#L373
- https://github.com/futurepress/epub.js/commit/ab4dd46408cce0324e1c67de4a3ba96b59e5012e
- https://github.com/futurepress/epub.js/compare/v0.3.88...v0.3.89
Products affected by CVE-2021-33040
-
cpe:2.3:a:futurepress:epub.js:*