Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37075
HistorySep 16, 2022 - 7:25 p.m.

Cross-site Scripting (XSS)

2022-09-1619:25:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
cross-site scripting
chrome
vulnerability
site isolation
renderer process
html page
attacker

EPSS

0.003

Percentile

68.3%

chrome is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of the renderer process allowing an attacker to bypass site isolation via a crafted HTML page.