Home/Alerts/Alert detail/

Cross-Domain JavaScript Source File Inclusion

Risk:
Low

Type:
Passive

CWE:
CWE-829

Summary: The page includes one or more script files from a third-party domain.

Solution: Ensure JavaScript source files are loaded from only trusted sources, and the sources can't be controlled by end users of the application.

Top Security News

Ivanti Flaw CVE-2025-0282 Actively Exploited, Impacts Connect Secure and Policy Secure

CISA Adds Second BeyondTrust Flaw to KEV Catalog Amid Active Attacks

Risk, Reputational Scores Enjoy Mixed Success as Security Tools

Apache Tomcat Vulnerability CVE-2024-56337 Exposes Servers to RCE Attacks

Microsoft: macOS bug lets hackers install malicious kernel drivers

Windows Server 2025 released—here are the new features

FBI deletes Chinese PlugX malware from thousands of US computers

Google Cloud Researchers Uncover Flaws in Rsync File Synchronization Tool

Top Alert List

Content Security Policy (CSP) Header Not Set

CSP

MediumAbsence of Anti-CSRF Tokens

MediumMissing Anti-clickjacking Header

InformationalModern Web Application

InformationalInformation Disclosure - Suspicious Comments

LowCross-Domain JavaScript Source File Inclusion

MediumContent Security Policy (CSP) Header Not Set

InformationalRe-examine Cache-control Directives

LowX-Content-Type-Options Header Missing

Top CVE List

CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

CVE-2023-48365 Qlik Sense HTTP Tunneling Vulnerability

CVE-2024-12686 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

CVE-2024-21338 Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability

CVE-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

CVE-2017-6736 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

CVE-2021-33045 Dahua IP Camera Authentication Bypass Vulnerability

CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability

CVE-2024-43047 Qualcomm Multiple Chipsets Use-After-Free Vulnerability

CVE-2024-51378 CyberPanel Incorrect Default Permissions Vulnerability

Top CWE List

HighCWE-200 Exposure of Sensitive Information to an Unauthorized Actor

CWE-581 Object Model Violation: Just One of Equals and Hashcode Defined

HighCWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-1053 Missing Documentation for Design

CWE-304 Missing Critical Step in Authentication

CWE-307 Improper Restriction of Excessive Authentication Attempts

HighCWE-116 Improper Encoding or Escaping of Output

CWE-284 Improper Access Control

HighCWE-330 Use of Insufficiently Random Values

CWE-615 Inclusion of Sensitive Information in Source Code Comments

Free online web security scanner

Don't show website scan report rating on the leaderboard