Client_Potential_XSS @ advanced.js

[smaguilarcx]

Client_Potential_XSS issue exists @ advanced.js in branch master

The application's Cx90a9d21a embeds untrusted data in the generated output with attr, at line 40 of /root/js/advanced.js. This untrusted data is embedded straight into the output without proper sanitization or encoding, enabling an attacker to inject malicious code into the output.

Namespace: CxDemoInABoxRepos
Repository: BodgeitIssue
Repository Url: https://github.com/CxDemoInABoxRepos/BodgeitIssue
CxAST-Project: CxDemoInABoxRepos/BodgeitIssue
CxAST platform scan: eed07198-d1ae-46bb-80fc-88cbc7cbac3c
Branch: master
Application: BodgeitIssue
Severity: MEDIUM
State: TO_VERIFY
Status: NEW
CWE: 79
Lines: 40

---

References
Read more