Medium severity6.1NVD Advisory· Published Dec 11, 2020· Updated Jun 17, 2026
CVE-2020-29455
CVE-2020-29455
Description
A cross-Site Scripting (XSS) vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to inject arbitrary web script or HTML via any address parameter (e.g., street or country).
Affected products
2- SmartyStreets/liveAddressPlugin.jsdescription
- Range: =3.2
Patches
Vulnerability mechanics
References
2- www.guidepointsecurity.com/liveaddressplugin-js-vulnerability-disclosure/nvdExploitThird Party Advisory
- jsfiddle.net/smartystreets/Lx2dbsaa/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.