Lucene search

K

Veracode Vulnerability DatabaseVERACODE:46396

HistoryApr 15, 2024 - 3:35 a.m.

Cross Site Scripting (XSS)

2024-04-1503:35:55

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

5

cross site scripting

xss

vulnerability

dashboard

notification

javascript

input validation

mautic/core

software

6.5 Medium

AI Score

Confidence

High

mautic/core is vulnerable to Cross Site Scripting (XSS). The vulnerability is due to to insufficient input validation within the notification feature when saving Dashboards, allowing users to inject and execute JavaScript code.

6.5 Medium

AI Score

Confidence

High

Related for VERACODE:46396