1. Home
  2. CVE Database
  3. CVE-2024-53386
MEDIUM · 4.9

CVE-2024-53386

Stage.js through 0.8.10 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowe...

Vulnerability Description

Stage.js through 0.8.10 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.

CVSS Score

4.9

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
PiqntStage.Js<= 0.8.10

Related Weaknesses (CWE)

CWE-94CWE-79

References

FAQ

What is CVE-2024-53386?

CVE-2024-53386 is a vulnerability with a CVSS score of 4.9 (MEDIUM). Stage.js through 0.8.10 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowe...

How severe is CVE-2024-53386?

CVE-2024-53386 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-53386?

Check the references section above for vendor advisories and patch information. Affected products include: Piqnt Stage.Js.