Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38747
HistoryJan 03, 2023 - 9:44 a.m.

Cross-site Scripting (XSS)

2023-01-0309:44:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
cross-site scripting
xss
github.com/usememos/memos
stored
javascript
create post
vulnerability
attack
software

0.001 Low

EPSS

Percentile

20.3%

github.com/usememos/memos is vulnerable to stored cross-site scripting(XSS) attacks. An attacker is able to inject and execute malicious javascript via the create post functionality.

0.001 Low

EPSS

Percentile

20.3%

Related for VERACODE:38747