high7.3
CVE-2020-28470
This affects the package @scullyio/scully before 1.0.9.
Impact
This affects the package @scullyio/scully before 1.0.9. The transfer state is serialised with the JSON.stringify() function and then written into the HTML page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Scully | Scully | before 1.0.9 |