← All advisories

Medium severity6.1NVD Advisory· Published Feb 10, 2020· Updated Jun 17, 2026

CVE-2020-8823

CVE-2020-8823

Description

htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c (aka callback) parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
sockjsnpm	< 0.3.0	0.3.0

Affected products

3

Sockjs Project/Sockjs
cpe:2.3:a:sockjs_project:sockjs:*:*:*:*:*:node.js:*:*
Range: <0.3.0
SockJS/SockJSdescription
ghsa-coords
pkg:npm/sockjs
Range: < 0.3.0

Patches

Vulnerability mechanics

References

6

github.com/advisories/GHSA-hh8v-jmh3-9437ghsaADVISORY
github.com/theyiyibest/Reflected-XSS-on-SockJS/issues/1nvdThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2020-8823ghsaADVISORY
snyk.io/vuln/SNYK-JS-SOCKJS-548397nvdThird Party AdvisoryWEB
www.sockjs.orgnvdVendor AdvisoryWEB
www.npmjs.com/package/sockjsghsaWEB

News mentions

0

No linked articles in our index yet.