← Database

CVE-2024-53386

MEDIUM CVSS: 4.9 Published: 2025-03-03 Modified: 2026-06-17

Description

Stage.js through 0.8.10 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.

Affected Platforms

Piqnt Stage.Js

Weakness Type

CWE-94, CWE-79

References