Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34921
HistoryApr 01, 2022 - 7:26 a.m.

Cross-Site Scripting (XSS)

2022-04-0107:26:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
cross-site scripting
stored
javascript
vulnerability
user input

EPSS

0.001

Percentile

21.4%

vditor is vulnerable to stored cross-site scripting. The vulnerability exists due to the lack of sanitization in user input fields which allows a malicious user to inject and execute arbitrary Javascript.

EPSS

0.001

Percentile

21.4%

Related for VERACODE:34921