CVE-2024-53382

4.9

MEDIUMCVSS v3

Published

March 3, 2025

Affected

4 projects

Assigned by

MITRE

Severity scale

010

Description

Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.

PrismJS/prism

GitHubLightweight, robust, elegant syntax highlighting.

<= 1.29.0NVD

@astrojs/prism

NPMAdd Prism syntax highlighting support to your Astro site

<= 1.29.0NVD

prism

RubyGems

More on this CVE

NVD↗GitHub Advisory↗

Prism Ruby parser

<= 1.29.0NVD

ruby/prism

GitHubPrism Ruby parser

<= 1.29.0NVD

Security Advisories

CVE-2024-53382

Description

More on this CVE