Cross-Site Scripting (XSS)

2023-05-1709:35:58

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

xss

javascript

vulnerable software

browser

EPSS

0.001

Percentile

34.5%

JSON

alextselegidis/easyappointments is vulnerable to Cross-Site Scripting (XSS). The vulnerability is due to a lack of sanitization in the legal settings, service names, and category names of the booking page, which allows an attacker to inject and execute arbitrary JavaScript into the browser.