Smashing Project

smashing_project

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Smashing

smashing

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-35440 1Smashing Project 1Smashing Jun 17, 2026 Jul 6, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Smashing 1.3.4 is vulnerable to Cross Site Scripting (XSS). A URL for a widget can be crafted and used to execute JavaScript on the victim's computer. The JavaScript code can then steal data available in the session/cook...Show more Smashing 1.3.4 is vulnerable to Cross Site Scripting (XSS). A URL for a widget can be crafted and used to execute JavaScript on the victim's computer. The JavaScript code can then steal data available in the session/cookies depending on the user environment (e.g. if re-using internal URL's for deploying, or cookies that are very permissive) private information may be retrieved by the attacker.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2021-35440

1Smashing Project

1Smashing

Jun 17, 2026

Jul 6, 2021

N/A· v4

6.1 MEDIUM· v3

4.3 MEDIUM· v2

Smashing 1.3.4 is vulnerable to Cross Site Scripting (XSS). A URL for a widget can be crafted and used to execute JavaScript on the victim's computer. The JavaScript code can then steal data available in the session/cookies depending on the user environment (e.g. if re-using internal URL's for deploying, or cookies that are very permissive) private information may be retrieved by the attacker.Show less