Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39649
HistoryMar 11, 2023 - 2:50 a.m.

Cross-Site Scripting (XSS)

2023-03-1102:50:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
cross-site scripting
vulnerability
front end
javascript
browser

EPSS

0.001

Percentile

40.3%

nim is vulnerable to Cross-Site Scripting (XSS) attacks. The library does not properly escape the special characters before it output to the front end, allowing an attacker to inject and execute malicious javascript on victim’s browser.

EPSS

0.001

Percentile

40.3%