Lucene search
Veracode Vulnerability DatabaseVERACODE:34664HistoryMar 14, 2022 - 7:26 a.m.
Cross-Site Scripting (XSS)
2022-03-1407:26:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
xss
github
plist function
other.go
user input
javascript
vulnerability
software
EPSS
0.001
Percentile
34.0%
github.com/xhofe/alist is vulnerable to cross-site scripting. The vulnerability exists in the Plist function in other.go because the user input parameters are not filtered which allows an attacker to inject and execute arbitrary javascript.
Related
osv
osv
Cross-site Scripting in Alist
2022-03-13 00:00:54
CVE-2022-26533
2022-03-12 01:15:35
cvelist
cvelist
CVE-2022-26533
2022-03-12 00:29:32
prion
prion
Cross site scripting
2022-03-12 01:15:00
nvd
nvd
CVE-2022-26533
2022-03-12 01:15:35
gitlab
gitlab
github
github
Cross-site Scripting in Alist
2022-03-13 00:00:54
cve
cve
CVE-2022-26533
2022-03-12 01:15:35