Cross-site Scripting (XSS)

2023-01-0306:50:15

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

github

stored

attack

user-input

sanitization

vulnerability

malicious

javascript

execution.

EPSS

0.001

Percentile

21.9%

JSON

github.com/usememos/memos is vulnerable to stored cross-site scripting attacks. The vulnerability exists due to improper user-input sanitization, which allows an attacker to create a memo with a malicious payload, resulting in malicious javascript execution.