Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:31405
HistoryJul 29, 2021 - 4:39 a.m.

Cross-site Scripting(XSS)

2021-07-2904:39:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
videojs
cross-site scripting
track tag
vulnerability
malicious script
injection

EPSS

0.004

Percentile

72.3%

videojs is vulnerable to cross-site scripting. An attacker is able to inject and execute malicious script via rc attribute of track tag.