Cross-site Scripting (XSS)

2022-05-0515:26:27

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

json

attack

vulnerable

javascript

security

EPSS

0.001

Percentile

26.2%

JSON

jquery.json-viewer is vulnerable to cross-site scripting(XSS) attacks. The library does not properly escape the special characters such as < in a JSON object, which allows an attacker to inject and execute malicious javascript on the target system.