Cross-site Scripting (XSS)

2019-08-2702:04:03

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

EPSS

0.001

Percentile

32.7%

JSON

anahkiasen/former is vulnerable to cross-site scripting (XSS). The vulnerability exists as the value $value in Checkable.php is not sanitized, allowing a remote attacker to inject arbitrary Javascript into a victim’s browser through the affected parameters.