Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:29591
HistoryMar 08, 2021 - 4:43 a.m.

Cross-Site Scripting (XSS)

2021-03-0804:43:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
xss
ansi_up
escape_txt_for_html
vulnerability
payloads

EPSS

0.001

Percentile

48.0%

ansi_up is vulnerable to cross-site scripting (XSS). The vulnerability exists as the existing sanitization methiod escape_txt_for_html is insufficient to prevent " and ' characters used in payloads.