Skip to content
OpenAdvisories

Package · npm

smartbanner.js

1 known vulnerabilities.

1 result · Feed

  • Low 1.3

    smartbanner.js rel noopener XSS vulnerability

    smartbanner.js is a customizable smart app banner for iOS and Android. Prior to version 1.14.1, clicking on smartbanner `View` link and navigating to 3rd party page leaves `window.opener` exposed. It may allow hostile third parties to abuse `window.opener`, e…