Cross-site Scripting (XSS)

2022-05-1304:31:20

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

facturascripts

xss

reflected cross-site scripting

editpageoption.php

lack of sanitization

malicious javascript

EPSS

0.001

Percentile

30.0%

JSON

facturascripts/facturascripts is vulnerable to reflected cross-site scripting. The vulnerability exists in the privateCore function of `EditPageOption.php’ due to the lack of sanitization which allows an attacker to inject and execute malicious javascript.