Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33975
HistoryFeb 03, 2022 - 4:51 a.m.

Cross-site Scripting (XSS)

2022-02-0304:51:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.053 Low

EPSS

Percentile

93.1%

erxes is vulnerable to cross-site scripting. The vulnerability exists due to a lack of validation of the template tag allowing an attacker to inject maliciously crated script via the browser.

CPENameOperatorVersion
erxesle0.20.7
erxesle0.20.7

0.053 Low

EPSS

Percentile

93.1%