RevealJS postMessage跨站脚本漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/hakimel/reveal.js/issues/3887
• https://security.snyk.io/vuln/SNYK-JS-REVEALJS-2414032
• https://hackerone.com/reports/691977
• https://jlajara.gitlab.io/Dom_XSS_PostMessage_2
• https://vulners.com/cve/CVE-2020-8127
• https://revealjs.com/postmessage/

Related Vulnerabilities

• PoCretool-postmessage-xss: Retool Self-Hosted - postMessage XSS via Custom Component Collections
• PoCCVE-2022-0776: RevealJS postMessage <4.3.0 - Cross-Site Scripting
• PoCwildcard-postmessage: postMessage - Cross-Site Scripting