Skip to content
OpenAdvisories

Package · npm

xdlocalstorage

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    Open Redirect in xdLocalStorage

    An issue was discovered in xdLocalStorage through 2.0.5. The buildMessage() function in xdLocalStorage.js specifies the wildcard (*) as the targetOrigin when calling the postMessage() function on the iframe object. Therefore any domain that is currently loade…