Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
Vulnerability Type
对生成代码的控制不恰当(代码注入)
Vulnerability Title
Prism 代码注入漏洞
Vulnerability Description
Prism是美国Prism个人开发者的一个应用软件。是一种轻量级的，可扩展的语法突出显示工具。 Prism 1.29.0及之前版本存在安全漏洞，该漏洞源于document.currentScript查找可被攻击者注入的HTML元素遮蔽，导致跨站脚本。
CVSS Information
N/A
Vulnerability Type
N/A