Cross-site Scripting (XSS)

2020-09-2106:32:24

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

firefox

xss

vulnerability

about:webrtc

javascript

innerhtml

webrtc

third-party control

exploit

attack

software

EPSS

0.001

Percentile

49.9%

JSON

firefox is vulnerable to cross-site scripting (XSS). JavaScript in the “about:webrtc” page is not sanitized properly being assigned to “innerHTML”. Data on this page is supplied by WebRTC usage and is not under third-party control, making this difficult to exploit, but the vulnerability could possibly be used for a cross-site scripting (XSS) attack.