| Title | CesiumGS Cesium <=1.137.0 Cross-Site Scripting |
|---|
| Description | Reflected Cross-Site Scripting (XSS) vulnerability exists in the Sandcastle standalone demo viewer. An attacker can craft a malicious URL containing a specially encoded payload that executes arbitrary JavaScript code in the victim's browser context. |
|---|
| Source | ⚠️ https://github.com/AnalogyC0de/public_exp/issues/18 |
|---|
| User | Ana10gy (UID 93358) |
|---|
| Submission | 03/01/2026 00:14 (5 months ago) |
|---|
| Moderation | 03/11/2026 17:49 (11 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 350473 [CesiumGS CesiumJS up to 1.137.0 standalone.html c cross site scripting] |
|---|
| Points | 16 |
|---|