PrismJS Prism
- CVE-2024-53382 Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can 0.3%
- CVE-2022-23647 Cross-site Scripting in Prism 1.4%
- CVE-2021-32723 Regular Expression Denial of Service (ReDoS) in Prism 1.4%
- CVE-2020-15138 Cross-Site Scripting in Prism 2.0%