Cross-site Scripting (XSS)

2019-08-2702:04:03

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

32.7%

JSON

anahkiasen/former is vulnerable to cross-site scripting (XSS). The vulnerability exists as the value $value in Checkable.php is not sanitized, allowing a remote attacker to inject arbitrary Javascript into a victim’s browser through the affected parameters.

CPENameOperatorVersion
anahkiasen/formerle4.2.0

CPE	Name	Operator	Version
	anahkiasen/former	le	4.2.0

References

github.com/formers/former/commit/828d2b2164954dec9d4ee3aba942d9a4c9e5c5d7

github.com/formers/former/pull/584

github.com/formers/former/releases/tag/4.2.1

0.001 Low

EPSS

Percentile

32.7%

JSON

Related for VERACODE:21382