Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7245
HistoryAug 06, 2018 - 8:54 a.m.

Cross-site Scripting (XSS)

2018-08-0608:54:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.001 Low

EPSS

Percentile

36.1%

react-dom is vulnerable to cross-site scripting (XSS) attacks. The library does not properly sanitize the attribute name in server applications, allowing a malicious user to inject and execute arbitrary Javascript. This does not affect client-rendered applications.

0.001 Low

EPSS

Percentile

36.1%