Cross-site Scripting (XSS)

2018-11-0708:22:08

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

EPSS

0.001

Percentile

50.6%

JSON

Apache Hupa is vulnerable to a cross-site scripting (XSS) attack. The library does not properly sanitize its text, allowing a malicious user to inject arbitrary Javascript through an email that is executed when opened or when displayed in a list of messages.