Skip to content
OpenAdvisories

Vendor

CloudCannon

1 known vulnerabilities.

Products

pagefind 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2024-45389

    Pagefind DOM clobbering could escalate to Cross-site Scripting (XSS)

    Pagefind, a fully static search library, initializes its dynamic JavaScript and WebAssembly files relative to the location of the first script the user loads. This information is gathered by looking up the value of `document.currentScript.src`. Prior to Pagef…

    CloudCannon pagefind pagefind pagefind npm crates.io