Description
Insufficient validation in cross-origin communication (postMessage) in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | reveal.js | Fixed version: 3.9.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | reveal.js | < 3.9.2 | 3.9.2 | GHSA-6vwx-mwp8-fh44 |