Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40487
HistoryMay 12, 2023 - 8:04 a.m.

Cross-Site Scripting (XSS)

2023-05-1208:04:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
cross-site scripting
user-input sanitization
`internal.js` vulnerability
arbitrary javascript
browser software

0.001 Low

EPSS

Percentile

36.2%

total4 is vulnerable to Cross-Site Scripting (XSS). The vulnerability is due to a lack of user-input sanitization in replace parameter of internal.js which allows an attacker to inject and execute arbitrary JavaScript into the browser

CPENameOperatorVersion
total4le0.0.80-4
total4le0.0.80-4

0.001 Low

EPSS

Percentile

36.2%

Related for VERACODE:40487