Cross-Site Scripting (XSS)

2023-05-1909:33:40

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

xss

easyappointments

vulnerability

user display name

sanitization

backend_header.php

arbitrary javascript

browser

EPSS

0.001

Percentile

34.5%

JSON

alextselegidis/easyappointments is vulnerable to Cross-Site Scripting (XSS). The vulnerability is due to a lack of user display name sanitization in backend_header.php, which allows an attacker to inject and execute arbitrary JavaScript into the browser.