Vigil@nce - Vigil@nce - Node.js video.js: Cross Site Scripting via Track Src Attribute, analyzed on 10/08/2021
October 2021 by Vigil@nce
Vigil@nce - An attacker can trigger a Cross Site Scripting via Track Src Attribute of Node.js video.js, in order to run JavaScript code in the context of the web site.
Plus d'information sur : https://vigilance.fr/vulnerability/Node-js-video-js-Cross-Site-Scripting-via-Track-Src-Attribute-36108