Cross-site Scripting (XSS)

2021-11-2904:02:40

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

71.9%

JSON

html_to_csv is vulnerble to cross-site scripting. The vulnerability exists through the formula embedded in a HTML page does not properly validate the input, allowing an attacker to embed or generate a malicious link or execute commands via CSV files.

CPENameOperatorVersion
html-to-csvle0.1.3
html-to-csvle0.1.3

CPE	Name	Operator	Version
	html-to-csv	le	0.1.3
	html-to-csv	le	0.1.3

References

github.com/hanwentao/html2csv/blob/master/html2csv/converter.py

0.003 Low

EPSS

Percentile

71.9%

JSON

Related for VERACODE:33129