Lucene search
Veracode Vulnerability DatabaseVERACODE:40356HistoryMay 01, 2023 - 8:50 p.m.
Cross-Site Scripting (XSS)
2023-05-0120:50:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
vulnerability
cross-site scripting
net.dreamlu:mica-xss
form object handler
software
0.002 Low
EPSS
Percentile
61.9%
net.dreamlu:mica-xss is vulnerable to Cross-Site Scripting (XSS) attacks. The library does not properly escape the special characters before it output to the front end, allowing an attacker to inject and execute malicious JavaScript on victim’s browser via the Form Object Handler.
Related
prion
prion
Cross site scripting
2023-04-21 12:15:00
nvd
nvd
CVE-2023-2220
2023-04-21 12:15:07
cve
cve
CVE-2023-2220
2023-04-21 12:15:07
cvelist
cvelist
CVE-2023-2220 Dream Technology mica Form Object cross site scripting
2023-04-21 11:31:03