Cross-site Scripting (XSS)

2023-02-2307:37:20

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

nuxt

software vulnerability

cross-site scripting

EPSS

0.001

Percentile

37.5%

JSON

nuxt is vulnerable to cross-site scripting(XSS) attacks. The vulnerability is due to prerendered sites, allowing an attacker to pass a specifically crafted URL through the _getPayloadURL function and execute harmful JavaScript on the target system.