VYPR

Smartbanner.js

by Ain

npm: smartbanner.js

Source repositories

CVEs (1)

  • CVE-2025-25300LowFeb 18, 2025
    risk 0.01cvss epss 0.00

    smartbanner.js is a customizable smart app banner for iOS and Android. Prior to version 1.14.1, clicking on smartbanner `View` link and navigating to 3rd party page leaves `window.opener` exposed. It may allow hostile third parties to abuse `window.opener`, e.g. by redirection…

VYPR — Vulnerability Intelligence