Lucene search
Veracode Vulnerability DatabaseVERACODE:38506HistoryDec 16, 2022 - 2:52 a.m.
Cross-Site Scripting (XSS)
2022-12-1602:52:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
xss
vulnerability
parameter encoding
javascript
org.wso2.carbon.registry.search
0.001 Low
EPSS
Percentile
39.6%
org.wso2.carbon.registry.search is vulnerable to cross-site scripting. The vulnerability exists in the advancedSearchForm-ajaxprocessor.jsp due to a lack of encoding request parameters which allows an attacker to inject and execute malicious JavaScript.
Related
osv
osv
CVE-2022-4520
2022-12-15 21:15:12
WSO2 carbon-registry Cross-site Scripting vulnerability
2022-12-15 21:30:26
github
github
WSO2 carbon-registry Cross-site Scripting vulnerability
2022-12-15 21:30:26
prion
prion
Cross site scripting
2022-12-15 21:15:00
cve
cve
CVE-2022-4520
2022-12-15 21:15:12
cvelist
cvelist
nvd
nvd
CVE-2022-4520
2022-12-15 21:15:12