Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:13282
HistoryJan 30, 2019 - 1:31 a.m.

Cross-site Scripting (XSS)

2019-01-3001:31:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

EPSS

0.001

Percentile

24.8%

croogo/croogo is vulnerable to cross-site scripting (XSS) attacks. The vulnerability exists as the value of title in Blocks/index.ctp is not sanitized, allowing XSS attacks.

EPSS

0.001

Percentile

24.8%

Related for VERACODE:13282