Lucene search
Veracode Vulnerability DatabaseVERACODE:38512HistoryDec 16, 2022 - 4:25 a.m.
Cross-Site Scripting (XSS)
2022-12-1604:25:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
cross-site scripting
cleanupmodule.php
vulnerability
injection
javascript
0.001 Low
EPSS
Percentile
42.3%
roots/soil is vulnerable to cross-site scripting. The vulnerability exists in the languageAttributes() function of CleanUpModule.php due to incorrectly neutralizing the language argument which allows an attacker to inject and execute malicious JavaScript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| roots/soil | le | 4.0.5 | |
| roots/soil | le | 4.0.5 |
Related
github
github
Roots Soil plugin vulnerable to Cross-site Scripting
2022-12-15 21:30:26
nvd
nvd
CVE-2022-4524
2022-12-15 21:15:13
prion
prion
Cross site scripting
2022-12-15 21:15:00
osv
osv
CVE-2022-4524
2022-12-15 21:15:13
Roots Soil plugin vulnerable to Cross-site Scripting
2022-12-15 21:30:26
cvelist
cvelist
cve
cve
CVE-2022-4524
2022-12-15 21:15:13