Lucene search
Veracode Vulnerability DatabaseVERACODE:32890HistoryNov 10, 2021 - 5:10 a.m.
Cross-site Scripting (XSS)
2021-11-1005:10:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
cross-site scripting
vulnerability
sanitization
javascript
injection
EPSS
0.001
Percentile
32.7%
graphql-playground-react is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in onHasCompletion.js allowing an attacker to inject and execute malicious javascript.
Related
nvd
nvd
CVE-2021-41249
2021-11-04 20:15:08
prion
prion
Code injection
2021-11-04 20:15:00
cve
cve
CVE-2021-41249
2021-11-04 20:15:08
cvelist
cvelist
CVE-2021-41249 XSS vulnerability in GraphQL Playground
2021-11-04 20:05:12
github
github
XSS vulnerability in GraphQL Playground from untrusted schemas
2021-11-08 18:06:09
osv
osv
GraphiQL introspection schema template injection attack
2021-11-08 18:03:50
CVE-2021-41248
2021-11-04 21:15:08
CVE-2021-41249
2021-11-04 20:15:08