CX Client_DOM_Stored_XSS @ src/main/resources/lessons/sqlinjection/js/assignment13.js [main]

[dimihycks]

Client_DOM_Stored_XSS issue exists @ src/main/resources/lessons/sqlinjection/js/assignment13.js in branch main

The method $.get embeds untrusted data in generated output with append, at line 57 of src\main\resources\lessons\sqlinjection\js\assignment13.js. This untrusted data is embedded into the output without proper sanitization or encoding, enabling an attacker to inject malicious code into the generated web-page.Similarity ID: 1637490224

Severity: High

CWE:79

Vulnerability details and guidance

Checkmarx

Training Recommended Fix

Lines: 43

---

Code (Line #43):

$.get("SqlInjectionMitigations/servers?column=" + column, function (result, status) {

---

[dimihycks]

Issue still exists.

[dimihycks]

Issue still exists.