Cross-site Scripting (XSS)

2023-03-1408:29:21

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

craftcms

xss

vulnerability

url parameters

label names

entry type

parameter.js

EPSS

0.001

Percentile

30.3%

JSON

craftcms/cms is vulnerable to Cross-site Scripting (XSS). The vulnerability exists due to improper validation of url parameters in label names or instruction of an entry type located in parameter.js, which allows an attacker to inject and execute malicious JavaScript in the victims browser.