Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:29845
HistoryMar 29, 2021 - 4:20 a.m.

Cross-site Scripting (XSS)

2021-03-2904:20:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.001 Low

EPSS

Percentile

29.5%

github.com/microcosm-cc/bluemonday is vulnerable to cross-site scripting (XSS). An attacker is able to bypass the validation of the script string to inject and execute arbitrary Javascript in a user’s browser.

0.001 Low

EPSS

Percentile

29.5%