Cross-site Scripting (XSS)

2023-03-1810:00:50

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

vulnerability

sanitization

malicious url

javascript payload

browser.

EPSS

0.001

Percentile

33.1%

JSON

streamlit is vulnerable to Cross-site Scripting (XSS). The vulnerability is due to a lack of sanitization in the path parameter in components.py; an attacker is able to trick the user into visiting a malicious URL which executes the malicious JavaScript payload into the browser.