Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37352
HistorySep 30, 2022 - 7:02 a.m.

Cross-site Scripting (XSS)

2022-09-3007:02:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
cross-site scripting
awesome-support
vulnerability
sanitization
malicious code
software

EPSS

0.001

Percentile

22.7%

awesome-support/awesome-support is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of the title of the ticket post allowing an attacker to inject maliciously crafted code into the system.

EPSS

0.001

Percentile

22.7%