Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33927
HistoryJan 27, 2022 - 8:02 a.m.

Cross-site Scripting (XSS)

2022-01-2708:02:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
microweber
cross-site scripting
checkouts
web.php
attacker
arbitrary javascript
vulnerability

EPSS

0.001

Percentile

21.4%

microweber/microweber is vulnerable to cross-site scripting. The vulnerability exists in checkouts of web.php during routing which allows an attacker to insert arbitrary Javascript.

EPSS

0.001

Percentile

21.4%

Related for VERACODE:33927