Cross-site Scripting (XSS)

2022-06-0604:04:23

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

facturascripts

cuenta.php

descripcion parameter

xss vulnerability

taint data

EPSS

0.001

Percentile

30.0%

JSON

facturascripts/facturascripts is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in the descripcion parameter in the test function of Cuenta.php, allowing an attacker to inject and execute malicious taint data.