Lucene search
Veracode Vulnerability DatabaseVERACODE:6427HistoryMay 30, 2018 - 6:19 a.m.
Cross-site Scripting (XSS)
2018-05-3006:19:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
38.0%
sexstatic is vulnerable to cross-site scripting (XSS) attacks. The vulnerability exists due to the lack of sanitization in user input of pathname in showdir.js, allowing arbitrary javascript code to be executed when rendered.
Related
osv
osv
Cross-Site Scripting in sexstatic
2018-10-01 16:30:38
nvd
nvd
CVE-2018-3755
2018-06-01 17:29:00
cve
cve
CVE-2018-3755
2018-06-01 17:29:00
hackerone
hackerone
nodejs
nodejs
Cross-Site Scripting
2018-06-01 22:12:05
github
github
Cross-Site Scripting in sexstatic
2018-10-01 16:30:38
prion
prion
Design/Logic Flaw
2018-06-01 17:29:00
cvelist
cvelist
CVE-2018-3755
2018-06-01 17:00:00