PrismJS records
6 published records for vendor prismjs.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-1333 Inefficient Regular Expression Complexity1
- CWE-400 Uncontrolled Resource Consumption1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2021-23341No exploit | Regular Expression Denial of Service (ReDoS)prismjs · prism | High7.5 | — | 3.2% | Feb 18, 2021 |
31Monitor | CVE-2020-15138No exploit | Cross-Site Scripting in Prismprismjs · previewers · CWE-79 | High7.5 | — | 2.0% | Aug 7, 2020 |
26Monitor | CVE-2021-32723No exploit | Regular Expression Denial of Service (ReDoS) in Prismprismjs · prism · CWE-400 | Medium6.5 | — | 1.4% | Jun 28, 2021 |
26Monitor | CVE-2021-3801No exploit | Inefficient Regular Expression Complexity in prismjs/prismprismjs · prism · CWE-1333 | Medium6.5 | — | 1.0% | Sep 15, 2021 |
24Monitor | CVE-2022-23647No exploit | Cross-site Scripting in Prismprismjs · prism · CWE-79 | Medium6.1 | — | 1.5% | Feb 18, 2022 |
21Monitor | CVE-2024-53382No exploit | Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly coprismjs · prism · CWE-94 | Medium5.4 | — | 0.3% | Mar 3, 2025 |
- CVE-2021-2334131Monitor
Regular Expression Denial of Service (ReDoS)
HighCVSS 7.5No exploitEPSS 3%prismjs · prismFeb 18, 2021
- CVE-2020-1513831Monitor
Cross-Site Scripting in Prism
HighCVSS 7.5No exploitEPSS 2%prismjs · previewersAug 7, 2020
- CVE-2021-3272326Monitor
Regular Expression Denial of Service (ReDoS) in Prism
MediumCVSS 6.5No exploitEPSS 1%prismjs · prismJun 28, 2021
- CVE-2021-380126Monitor
Inefficient Regular Expression Complexity in prismjs/prism
MediumCVSS 6.5No exploitEPSS 1%prismjs · prismSep 15, 2021
- CVE-2022-2364724Monitor
Cross-site Scripting in Prism
MediumCVSS 6.1No exploitEPSS 1%prismjs · prismFeb 18, 2022
- CVE-2024-5338221Monitor
Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly co
MediumCVSS 5.4No exploitEPSS 0%prismjs · prismMar 3, 2025