Vulnerabilities in PrismJS

5 results

CVE-2020-15138HIGHCross-Site Scripting in PrismEPSS 2.0%CVE-2022-23647HIGHCross-site Scripting in PrismEPSS 1.5%CVE-2021-32723HIGHRegular Expression Denial of Service (ReDoS) in PrismEPSS 1.4%CVE-2021-3801HIGHInefficient Regular Expression Complexity in prismjs/prismEPSS 1.0%CVE-2024-53382MEDIUMPrism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly coEPSS 0.3%