Product

pagefind @pagefind/default-ui vulnerabilities

1 published CVE affecting pagefind @pagefind/default-ui, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest pagefind @pagefind/default-ui CVEs

Newest publication first

CVE-2024-45389 Pagefind DOM clobbering could escalate to Cross-site Scripting (XSS)
Published 2024-09-03

MediumCVSS 5.4 EPSS 0.42%

Pagefind, a fully static search library, initializes its dynamic JavaScript and WebAssembly files relative to the location of the first script the user loads. This information is gathered by looking up the value of document.currentScript.src. Prior to Pagefind version 1.1.1, it i...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

pagefind @pagefind/default-ui vulnerabilities

Latest pagefind @pagefind/default-ui CVEs

CVE-2024-45389 Pagefind DOM clobbering could escalate to Cross-site Scripting (XSS)