Lucene search
Veracode Vulnerability DatabaseVERACODE:40649HistoryMay 24, 2023 - 1:44 a.m.
Cross-site Scripting (XSS)
2023-05-2401:44:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
cross-site scripting
apiurl
toolbar
javascript
security
EPSS
0.001
Percentile
32.5%
posthog-js is vulnerable to Cross-site Scripting (XSS). The vulnerability exists because the library does not properly sanitize the apiURL attribute in the toolbar.ts, which allows an attacker to inject and execute malicious JavaScript.
Related
cvelist
cvelist
CVE-2023-32325 Cross-site scripting in PostHog-js
2023-05-26 23:00:17
prion
prion
Cross site scripting
2023-05-27 00:15:00
nvd
nvd
CVE-2023-32325
2023-05-27 00:15:09
osv
osv
Potential for cross-site scripting in PostHog-js
2023-05-22 20:35:03
CVE-2023-32325
2023-05-27 00:15:09
github
github
Potential for cross-site scripting in PostHog-js
2023-05-22 20:35:03
cve
cve
CVE-2023-32325
2023-05-27 00:15:09