Cross-site Scripting (XSS)

2022-11-2807:21:31

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

spatie/browsershot

browsershot.php

html content

file:// validation

remote attacker

malicious javascript

vulnerability

EPSS

0.002

Percentile

55.7%

JSON

spatie/browsershot is vulnerable to cross-site scripting. The vulnerability exists due to the lack of file:// validation in the html content of Browsershot.php which allows a remote attacker to inject and execute malicious JavaScript into the system.