CVE-2020-7747: Lightning-Viz Lightning

Medium severity, CVSS 6.3. EPSS: 0.9% chance of exploitation in the next 30 days.

This affects all versions of package lightning-server. It is possible to inject malicious JavaScript code as part of a session controller.

Affected products

• Lightning-Viz Lightning: any version

Published 2020-10-20. Last modified 2026-06-17.