Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38515
HistoryDec 16, 2022 - 6:24 a.m.

Cross-Site Scripting (XSS)

2022-12-1606:24:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
cross-site scripting
collective.task
rendercell function
table.py
javascript injection
software vulnerability

EPSS

0.001

Percentile

31.0%

collective.task is vulnerable to cross-site scripting. The vulnerability exists in the renderCell function of table.py due to missing escape columns which allows an attacker to inject and execute malicious JavaScript.

EPSS

0.001

Percentile

31.0%

Related for VERACODE:38515