Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36225
HistoryJun 30, 2022 - 9:53 p.m.

Cross-Site Scripting (XSS)

2022-06-3021:53:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13

0.001 Low

EPSS

Percentile

36.0%

firefox is vulnerable to cross-site scripting. The vulnerability exists because the user input of SVG tags that referenced a same-origin document is not properly sanitized which allows an attacker to inject and execute arbitrary javascript.