Cross-Site Scripting (XSS)

2021-11-0508:40:58

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

tempura

vulnerability

esc function

sanitation

EPSS

0.002

Percentile

56.7%

JSON

tempura is vulnerable to cross-site scripting (XSS) attacks. An attacker is able to inject malicious object type inputs to the esc function resulting in a potential cross-site scripting vulnerability due to the lack of sanitations inside the function.