Volerion logoVolerion
Volerion logoVolerion

Lucy XSS Filter Improper Sanitization Vulnerability Allowing JavaScript Execution

Vulnerability

A vulnerability in Lucy XSS Filter, prior to commit e5826c0, allows attackers to execute malicious JavaScript. This issue arises from improper sanitization linked to misconfigured default superset rule files.

Impact

Exploitation of this vulnerability could lead to cross-site scripting (XSS) attacks, allowing for the execution of malicious scripts in the context of the user's browser.

Added: Jan 16, 2026, 6:19 AM
Updated: Jan 16, 2026, 6:19 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
1.7
exploitability
6.4
remediation
0.0
relevance
2.1
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.