Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38285
HistoryNov 29, 2022 - 3:26 a.m.

Cross-site Scripting (XSS)

2022-11-2903:26:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
cross-site scripting
backdrop
vulnerability
sanitization
javascript

EPSS

0.005

Percentile

77.3%

backdrop/backdrop is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in the Page content in the library, allowing an attacker to inject and execute malicious javascript.

EPSS

0.005

Percentile

77.3%