Cross-site Scripting (XSS)

2022-07-1411:38:09

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

vulnerability

ameos_tarteaucitron

user input

malicious javascript

EPSS

0.001

Percentile

22.7%

JSON

ameos/ameos_tarteaucitron is vulnerable to cross-site scripting(XSS) attacks. The library does not properly encode the user input in displayParticipantsFormAction function, allowing an attacker to inject and execute malicious javascript on the target system.