Html Injection

2024-01-2406:06:00

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

html injection

vulnerability

tuitse-tsusin

html.py

escape

sanitization

user-supplied data

web application

cross-site scripting

software

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

Confidence

Low

EPSS

0.001

Percentile

20.6%

JSON

tuitse-tsusin is vulnerable to Html Injection. The vulnerability is due to the tuitse_html function within html.py lacking proper escape or sanitization functionality for user-supplied data when incorporated into HTML output. This could allow attacker to inject malicious HTML or JavaScript code into the web application, which can potentially lead to Cross-site Scripting.