Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33343
HistoryDec 15, 2021 - 7:40 a.m.

Cross-site Scripting (XSS)

2021-12-1507:40:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
cross-site scripting
sanitization
web page generation
vulnerability
user input
malicious scripts

EPSS

0.001

Percentile

33.4%

snipe/snipe-it is vulnerable to cross-site scripting. The vulnerability exists due to lack of sanitization of user input which allows an attacker to inject malicious scripts during Web Page Generation.

EPSS

0.001

Percentile

33.4%