Lucene search
Veracode Vulnerability DatabaseVERACODE:39434HistoryFeb 27, 2023 - 2:48 a.m.
Cross-site Scripting (XSS)
2023-02-2702:48:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
cross-site scripting
vulnerability
calendar.js
placeholder field
attacker
javascript
0.001 Low
EPSS
Percentile
25.5%
baremetrics-calendar is vulnerable to Cross-site Scripting (XSS). The vulnerability exists because Calendar.js does not properly sanitize the placeholder field when creating a Calender instance which allows an attacker to inject and execute malicious JavaScript.
Related
github
github
Baremetrics date range picker vulnerable to Cross-site Scripting
2023-02-21 15:30:23
prion
prion
Cross site scripting
2023-02-21 15:15:00
osv
osv
CVE-2021-32859
2023-02-21 15:15:11
Baremetrics date range picker vulnerable to Cross-site Scripting
2023-02-21 15:30:23
cvelist
cvelist
nvd
nvd
CVE-2021-32859
2023-02-21 15:15:11
cve
cve
CVE-2021-32859
2023-02-21 15:15:11