Description
Insufficient validation in cross-origin communication (postMessage) in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks.
Remediation
References
Related Vulnerabilities
Cherokee Out-of-bounds Write Vulnerability (CVE-2019-20800)
Python Integer Overflow or Wraparound Vulnerability (CVE-2016-9063)
EspoCRM Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2022-38845)
WordPress Plugin XData Toolkit Arbitrary File Upload (1.9)
WordPress Plugin MStore API-Create Native Android & iOS Apps On The Cloud Security Bypass (3.9.2)