Skip to content
OpenAdvisories

Package · npm

xdlocalstorage

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2015-9544

    Improper Input Validation in xdLocalStorage

    An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage() function in xdLocalStoragePostMessageApi.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can expl…

    xdlocalstorage npm
  • High 8.8
    CVE-2020-11610

    xdlocalstorage does not verify request origin

    An issue was discovered in xdLocalStorage through 2.0.5. The postData() function in xdLocalStoragePostMessageApi.js specifies the wildcard (*) as the targetOrigin when calling the postMessage() function on the parent object. Therefore any domain can load the …

    xdlocalstorage npm
  • High 7.1
    CVE-2015-9545

    Improper Input Validation in xdLocalStorage

    An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage() function in xdLocalStorage.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue…

    xdlocalstorage npm