Cross-site Scripting (XSS)

2022-01-0507:11:39

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

oro platform

cross-site scripting

email template

preview

authorized attacker

malicious payload

EPSS

0.001

Percentile

19.5%

JSON

oro/platform is vulnerable to cross-site scripting. The library does not properly validate the email template preview content, allowing an authorized attacker to add malicious XSS payload to the email template content and execute when the attacked user preview the template.