Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21688
HistoryOct 11, 2019 - 9:19 a.m.

Cross-Site Scripting (XSS)

2019-10-1109:19:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

EPSS

0.001

Percentile

36.1%

Craft CMS is vulnerable to cross-site scripting (XSS) attack. The attack is possible because the name attribute in site deletion is not properly validated, allowing an attacker to inject arbitrary script through it.

EPSS

0.001

Percentile

36.1%

Related for VERACODE:21688