Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:32684
HistoryOct 21, 2021 - 6:48 a.m.

Cross-Site Scripting (XSS)

2021-10-2106:48:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
cross-site scripting
camaleon_cms
vulnerability
post comments
javascript injection

EPSS

0.001

Percentile

31.0%

camaleon_cms is vulnerable to cross-site scripting. The library does not properly sanitize the post’s comment section, allowing malicious users to inject and execute malicious javascript.

EPSS

0.001

Percentile

31.0%