Vulnerabilities > Smartystreets

DATE	CVE	VULNERABILITY TITLE	RISK
2020-12-11	CVE-2020-29455	Cross-site Scripting vulnerability in Smartystreets Liveaddressplugin.Js 3.2 A cross-Site Scripting (XSS) vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to inject arbitrary web script or HTML via any address parameter (e.g., street or country). network low complexity smartystreets CWE-79	6.1

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.

Vulnerabilities > Smartystreets {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"Smartystreets"}]}

Vulnerabilities > Smartystreets