Cross-site Scripting (XSS)

2022-06-1409:19:16

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

facturascripts

vulnerability

sanitization

username field

malicious script

EPSS

0.001

Percentile

30.0%

JSON

facturascripts/facturascripts is vulnerable to cross site scripting. The vulnerability exists due to a lack of sanitization of the username field allowing an attacker to input maliciously crafted script via the username field when showing ‘login-user-not-found’ message.