EPSS
Percentile
30.0%
parse-url is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of the user input allowing attacker to inject maliciously crafted script into the system.
github.com/ionicabizau/parse-url/commit/21c72ab9412228eea753e2abc48f8962707b1fe3
huntr.dev/bounties/4e046c63-b1ca-4bcc-b418-29796918a71b