CVE-2020-29455

A cross-Site Scripting (XSS) vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to…

published December 11, 2020

CVSS
—
EPSS
1%
Percentile
67.0
In the wild
Unconfirmed
What it is

A cross-Site Scripting (XSS) vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to inject arbitrary web script or HTML via any address parameter (e.g., street or country).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01162 · 67.0th percentile
Published
2020-12-11T19:50Z
EPSS history
Timeline
  • 11 DEC 19:50Z
    A cross-Site Scripting (XSS) vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to…
    cvelistv5