Cross-site Scripting (XSS)

2022-12-1307:02:57

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

xss

vulnerability

nuxt

prerendered sites

javascript

EPSS

0.001

Percentile

26.4%

JSON

nuxt is vulnerable to cross-site scripting(XSS) attacks. A malicious user is able to pass a specifically crafted URL with no protocol or search parameters through the _getPayloadURL function and execute harmful JavaScript on the target system. The vulnerability currently exists only on prerendered sites.