---
title: AngularJS – XSS Vulnerability Through The Attribute “usemap” From 1.0.0 To 1.2.30
description: "Impact Area Security       Severity High       Affected Element ServiceNow UI Script Salesforce Static Resource ## Rule number **SN-JSL-006 **(for ServiceNow) **SF-JSL-008** (for Salesforce) ## Impact The “usemap” attribute is used to reference another element by name or…"
url: "https://community-staging.qualityclouds.com/qcdocs/qc/vulnerabilities-in-open-source-libraries-salesforce/angularjs-xss-vulnerability-through-the-attribute-usemap-from-1-0-0-to-1-2-30/"
updated: "2025-03-21"
category: Rules
---

# AngularJS – XSS Vulnerability Through The Attribute “usemap” From 1.0.0 To 1.2.30

Impact Area

Security

 

 

 

           Severity

High

 

 

 

           Affected Element

ServiceNow

UI Script

Salesforce

Static Resource

## Rule number

**SN-JSL-006 **(for ServiceNow)

**SF-JSL-008** (for Salesforce)

## Impact

The “usemap” attribute is used to reference another element by name or id. Since the name and id attributes are already blacklisted, a sanitized usemap attribute could only reference unsanitized content, which is a security risk.

## Remediation

Update AngularJS to the latest version.

### Time to fix

30 min

## References

This rule is linked to [Common Weakness Enumeration CWE-79 Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)](https://cwe.mitre.org/data/definitions/79.html).