The vulnerability of the XML conversion software “xml2js” to JavaScript lies in the uncontrolled modification of object prototype attributes. This allows attackers to edit or add new properties to objects.

The vulnerability of the XML object conversion software using JavaScript’s xml2js is related to uncontrolled changes to the attributes of the prototype object. Exploiting this vulnerability allows a malicious actor to remotely modify the properties of the proto object...