Lucene search
Veracode Vulnerability DatabaseVERACODE:33537HistoryJan 07, 2022 - 3:41 a.m.
Cross-site Scripting (XSS)
2022-01-0703:41:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
xss
cross-site scripting
confirmation.jspx
user input
malicious javascript
security vulnerability
EPSS
0.002
Percentile
57.4%
applicant-mvcbean-cdi-jsp-portlet is vulnerable to cross-site scripting. The library does not properly escape the user input parameters in confirmation.jspx, allowing an attacker to inject and execute malicious javascript.
Related
nvd
nvd
CVE-2021-36738
2022-01-06 09:15:07
github
github
Cross-site Scripting in Apache Pluto
2022-01-08 00:46:17
cvelist
cvelist
cve
cve
CVE-2021-36738
2022-01-06 09:15:07
osv
osv
Cross-site Scripting in Apache Pluto
2022-01-08 00:46:17
cnvd
cnvd
Apache Pluto Cross-Site Scripting Vulnerability (CNVD-2022-04997)
2022-01-10 00:00:00
prion
prion
Cross site scripting
2022-01-06 09:15:00