Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:31710
HistoryAug 17, 2021 - 3:37 a.m.

Cross-site Scripting (XSS)

2021-08-1703:37:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
cross-site scripting
lin_cms_flask
vulnerability
register function
user name
sanitization

EPSS

0.001

Percentile

48.6%

lin_cms_flask is vulnerable to cross-site scripting (xss). The vulnerability exists due to the lack of sanitization of user name in the register() function which will execute the script in the logs() function.

EPSS

0.001

Percentile

48.6%

Related for VERACODE:31710