Lucene search
Veracode Vulnerability DatabaseVERACODE:40038HistoryApr 04, 2023 - 1:46 p.m.
Cross-Site Scripting (XSS)
2023-04-0413:46:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
cross-site scripting
xss
html
javascript
injection
vulnerability
library
EPSS
0.001
Percentile
17.0%
sitegeist/fluid-components is vulnerable to Cross-Site Scripting (XSS). The vulnerability exists because the library does not properly prevent the unwanted double-escaping of HTML markup, which allows an attacker to inject and execute malicious javascript.
Related
prion
prion
Design/Logic Flaw
2023-12-12 17:15:00
nvd
nvd
CVE-2023-28604
2023-12-12 17:15:07
friendsofphp
friendsofphp
cvelist
cvelist
CVE-2023-28604
2023-12-12 00:00:00
osv
osv
Fluid Components TYPO3 extension vulnerable to Cross-Site Scripting
2023-03-27 21:48:40
CVE-2023-28604
2023-12-12 17:15:07
cve
cve
CVE-2023-28604
2023-12-12 17:15:07
vulnrichment
vulnrichment
CVE-2023-28604
2023-12-12 00:00:00
github
github
Fluid Components TYPO3 extension vulnerable to Cross-Site Scripting
2023-03-27 21:48:40