← Back

Smartystreets

smartystreets

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Liveaddressplugin.js
liveaddressplugin.js
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-29455
1Smartystreets
1Liveaddressplugin.js
Jun 17, 2026
Dec 11, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
A cross-Site Scripting (XSS) vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to inject arbitrary web script or HTML via any address paramete...Show more
A cross-Site Scripting (XSS) vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to inject arbitrary web script or HTML via any address parameter (e.g., street or country).Show less