Cross-site Scripting (XSS)

2018-11-2301:56:50

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

37.3%

JSON

showdoc/showdoc is vulnerable to cross-site scripting (XSS) attacks. The vulnerability exists due to the lack of sanitization of the value of lang parameter, allowing XSS attacks.

CPENameOperatorVersion
showdoc/showdocle2.4.1

CPE	Name	Operator	Version
	showdoc/showdoc	le	2.4.1

References

github.com/star7th/showdoc/issues/392

0.001 Low

EPSS

Percentile

37.3%

JSON

Related for VERACODE:7873