Cross-site Scripting (XSS)

2022-09-1504:47:04

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

cross-site scripting

sanitization

remote attacker

javascript

execution

github.com/ouqiang/gocron

EPSS

0.001

Percentile

30.5%

JSON

github.com/ouqiang/gocron is vulnerable to cross-site scripting. The vulnerability exists due to lack of sanitization in scope.row.hostname parameter in list.vue which allows a remote attacker to inject and execute malicious javascript into the system.