Cross-site Scripting (XSS)

2022-11-0207:20:16

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

github

remote attack

javascript

insufficient checks

api discovery

EPSS

0.001

Percentile

34.5%

JSON

github.com/eolinker/apinto-dashboard is vulnerable to cross-site scripting(XSS) attacks. A remote authenticated attacker is able to inject and execute malicious JavaScript on the victim’s machine due to insufficient checks in /api/discoveries/ file.