Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38564
HistoryDec 22, 2022 - 6:58 a.m.

Cross-Site Scripting (XSS)

2022-12-2206:58:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
cross-site scripting
vulnerability
javascript injection
user input sanitization

EPSS

0.001

Percentile

49.6%

smoothie is vulnerable to cross-site scripting. The vulnerability exists in multiple functions in smoothie.js because user inputs are not properly sanitized which allows an attacker to inject and execute arbitrary JavaScript.

EPSS

0.001

Percentile

49.6%

Related for VERACODE:38564