← back
CVE-2020-29455

CVE-2020-29455

EPSS 1.1%
A cross-Site Scripting (XSS) vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to inject arbitrary web script or HTML via any address parameter (e.g., street or country).
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/smartystreets-archiveshttps://jsfiddle.net/smartystreets/Lx2dbsaa/https://www.guidepointsecurity.com/liveaddressplugin-js-vulnerability-disclosure/