Cross-site Scripting (XSS)

2023-03-0310:06:28

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

github

vulnerability

user input

html entities

javascript

browser

security

EPSS

0.001

Percentile

46.8%

JSON

github.com/kitabisa/teler-waf is vulnerable to Cross-site Scripting (XSS) attacks. The library does not properly escape and filter HTML entities in user input before it output to the front end, allowing an attacker to inject and execute malicious JavaScript on a victim’s browser, and potentially steal login tokens.