CVE-2024-34067: Unchecked Jquery Dom Xss

Unsanitized data from an API response or collection iteration is appended to the DOM. This can lead to a DOM-based Cross-Site Scripting (XSS) vulnerability if the data is controlled by an attacker. Use a sanitization function to safely escape HTML entities before rendering the data.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0JS
greprules fetch cve-2024-34067-unchecked-jquery-dom-xss --engine opengrep

Description

Unsanitized data from an API response or collection iteration is appended to the DOM. This can lead to a DOM-based Cross-Site Scripting (XSS) vulnerability if the data is controlled by an attacker. Use a sanitization function to safely escape HTML entities before rendering the data.