@haxtheweb/video-player
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Stored XSS via <iframe> in HAX CMS allows access to sensitive client-side data and account takeover | @haxtheweb/haxcms-nodejs@haxtheweb/iframe-loader | npm | High | Fix reported | |
| HAX CMS: Stored XSS via '<video-player>' component allows arbitrary JavaScript execution and token theft | @haxtheweb/haxcms-nodejs@haxtheweb/video-player | npm | Medium | Fix reported |