CVE-2020-7676 is a vulnerability in AngularJS
Published on June 8, 2020
angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping "<option>" elements in "<select>" ones changes parsing behavior, leading to possibly unsanitizing code.
Products Associated with CVE-2020-7676
Want to know whenever a new CVE is published for AngularJS? stack.watch will email you.
Exploit Probability
EPSS
0.56%
Percentile
68.00%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.