Skip to content
OpenAdvisories

Package · npm

xdlocalstorage

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 7.1
    CVE-2015-9544

    Improper Input Validation in xdLocalStorage

    An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage() function in xdLocalStoragePostMessageApi.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can expl…

    xdlocalstorage npm
  • High 8.8
    CVE-2020-11610

    xdlocalstorage does not verify request origin

    An issue was discovered in xdLocalStorage through 2.0.5. The postData() function in xdLocalStoragePostMessageApi.js specifies the wildcard (*) as the targetOrigin when calling the postMessage() function on the parent object. Therefore any domain can load the …

    xdlocalstorage npm
  • Medium 6.1
    CVE-2020-11611

    Open Redirect in xdLocalStorage

    An issue was discovered in xdLocalStorage through 2.0.5. The buildMessage() function in xdLocalStorage.js specifies the wildcard (*) as the targetOrigin when calling the postMessage() function on the iframe object. Therefore any domain that is currently loade…

    xdlocalstorage npm
  • High 7.1
    CVE-2015-9545

    Improper Input Validation in xdLocalStorage

    An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage() function in xdLocalStorage.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue…

    xdlocalstorage npm