Stored Cross-site Scripting (XSS)

2023-04-2607:17:36

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

azuracast

software

vulnerability

main.phtml

stored cross-site scripting

xss

attack

EPSS

0.001

Percentile

34.5%

JSON

azuracast/azuracast is vulnerable to Stored Cross-site Scripting (XSS). The vulnerability exists in main.phtml because the user display name in the menu is not properly escaped before being rendered, allowing an attacker to inject and execute malicious JavaScript through the display name.