Cross-site Scripting (XSS)

2018-08-0305:27:58

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

EPSS

0.001

Percentile

20.7%

JSON

intelliants/subrion is vulnerable to cross-site scripting (XSS) attacks. The vulnerability exists due to the improper sanitization of the $tooltip value, allowing a persistent cross-site scripting (XSS) vector to be rendered.

References

github.com/intelliants/subrion/commit/deaa969d959b40fb1cdf2c8d762a29b81152345c

github.com/intelliants/subrion/issues/760

github.com/intelliants/subrion/pull/763

EPSS

0.001

Percentile

20.7%

JSON

Related for VERACODE:7231