Cross-site Scripting (XSS)

2021-12-2309:44:07

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

ajaxnetprofessional

cross-site scripting

input validation

parse function

ajaxpro/core.js

arbitrary javascript execution

EPSS

0.001

Percentile

30.5%

JSON

ajaxnetprofessional is vulnerable to cross-site scripting attacks. The vulnerability exists due to lack of input validation in parse function of AjaxPro/core.js in when parsing json input which allows a malicious attacker to inject and execute arbitrary javascript.