Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47509

HistoryJun 13, 2024 - 6:16 a.m.

Cross-Site Scripting (XSS)

2024-06-1306:16:20

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

invenio_communities

affiliations

registration

attackers

malicious scripts

software

6.6 Medium

AI Score

Confidence

High

invenio_communities is vulnerable to Cross-Site Scripting (XSS). The vulnerability is due to inadequate sanitization of the Affiliations field during the account registration process, allowing attackers to inject and execute malicious scripts.

6.6 Medium

AI Score

Confidence

High