Videojs: >> Video.js >> 3.0.7 Security Vulnerabilities
This affects the package video.js before 7.14.3. The src attribute of track tag allows to bypass HTML escaping and execute arbitrary code.
CVSS Score
6.5
EPSS Score
0.002
Published
2021-07-28