Lucene search
Veracode Vulnerability DatabaseVERACODE:39773HistoryMar 14, 2023 - 11:41 a.m.
Cross-site Scripting (XSS)
2023-03-1411:41:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
cross-site scripting
rsshub
vulnerability
javascript
browser
injection
0.001 Low
EPSS
Percentile
32.3%
rsshub is vulnerable to Cross-site Scripting (XSS). The vulnerability exists due to the improper sanitisation of special characters in parameter.js which allows an attacker to inject and execute malicious JavaScript into the browser.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rsshub | le | 1.0.0-master.c8f06fe | |
| rsshub | le | 1.0.0-master.c8f06fe |
Related
cve
cve
CVE-2023-26491
2023-03-03 23:15:12
osv
osv
CVE-2023-26491
2023-03-03 23:15:12
rsshub vulnerable to Cross-site Scripting via unvalidated URL parameters
2023-03-01 18:02:28
prion
prion
Design/Logic Flaw
2023-03-03 23:15:00
nvd
nvd
CVE-2023-26491
2023-03-03 23:15:12
cvelist
cvelist
github
github
rsshub vulnerable to Cross-site Scripting via unvalidated URL parameters
2023-03-01 18:02:28