Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36489
HistoryJul 26, 2022 - 3:07 a.m.

Cross-site Scripting (XSS)

2022-07-2603:07:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
31

0.001 Low

EPSS

Percentile

43.5%

grapesjs is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in the class name in ClassTagView.ts when it adds to the selector manager, allowing an attacker to inject and execute malicious javascript.

0.001 Low

EPSS

Percentile

43.5%

Related for VERACODE:36489