Cross site scripting

A cross-Site Scripting XSS vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to inject arbitrary web script or HTML via any address parameter e.g., street or country...

CVE-2020-29455

A cross-Site Scripting XSS vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to inject arbitrary web script or HTML via any address parameter e.g., street or country...

CVE-2020-29455

CVE-2020-29455 describes a cross-site scripting (XSS) vulnerability in SmartyStreets’ liveAddressPlugin.js 3.2, specifically in the functions this.showInvalid and this.showInvalidCountry. The issue allows remote attackers to inject arbitrary web script or HTML via any address parameter (e.g., str...

CVE-2020-29455: Improper Neutralization of Input During Web Page Generation

A cross-Site Scripting XSS vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to inject arbitrary web script or HTML via any address parameter e.g., street or country...

PT-2020-17167

Name of the Vulnerable Software and Affected Versions liveAddressPlugin.js version 3.2 Description A cross-Site Scripting XSS issue in this.showInvalid and this.showInvalidCountry functions of liveAddressPlugin.js allows remote attackers to inject arbitrary web script or HTML via any address...

SmartyStreets liveAddressPlugin.js Cross Site Scripting Vulnerability

SmartyStreets LiveAddressPlugin is a codebase for adding address validation and autocomplete functionality to web pages based on Javascript support pluggable by SmartyStreets individual developers. A cross-site scripting vulnerability in SmartyStreets liveAddressPlugin.js version 3.2 allows remot...