Skip to content
OpenAdvisories

Vendor

nuknightlab

2 known vulnerabilities.

Products

TimelineJS3 1 Knight Lab Timeline 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2020-15092

    Stored XSS in TimelineJS3

    In TimelineJS before version 3.7.0, some user data renders as HTML. An attacker could implement an XSS exploit with maliciously crafted content in a number of data fields. This risk is present whether the source data for the timeline is stored on Google Sheet…

    nuknightlab TimelineJS3 @knight-lab/timelinejs Web / CMS npm