Korean
<< Back
VID 210185
Severity 20
Port 80, ...
Protocol TCP
Class CGI
Detailed Description The page includes one or more script files from a third-party domain.

* References:
https://blog.securelayer7.net/owasp-top-10-cross-site-scripting-3-bad-javascript-imports/

* Platforms Affected:
Any operating system Any version
Recommendation Ensure JavaScript source files are loaded from only trusted sources, and the sources can't be controlled by end users of the application.
Related URL (CVE)
Related URL (SecurityFocus)
Related URL (ISS)