CVE-2023-3620

37th percentile - higher than 37% of all known CVEs

A Cross-site Scripting (XSS) vulnerability, stored in the GitHub repository amauric/tarteaucitron.js prior to version 1.13.1. An attacker can exploit this vulnerability to inject malicious scripts that will be executed in the victim's browser context.

This threat can lead to user data theft or session hijacking. Organizations should be aware of the risks associated with using this library in their applications.

It is recommended to update to version 1.13.1 or later to mitigate this vulnerability. Additionally, conducting a security audit of applications using this library is advisable.