Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21480
HistorySep 11, 2019 - 12:06 a.m.

Cross-site Scripting (XSS)

2019-09-1100:06:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18

0.003 Low

EPSS

Percentile

67.8%

Mozilla is vulnerable to cross-site scripting (XSS). It does not handle the parameters provided through title and textarea elements using innerHTML, allowing an attacker to inject arbitrary scripts through it.