PT-2021-23340
CVE-2021-41567
·
تاريخ النشر
2021-10-08
·
تاريخ التحديث
2021-10-15
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Tad Uploader (affected versions not specified)
Description
The issue arises from the new add subject parameter of the Tad Uploader view book list function, which fails to filter special characters. This allows unauthenticated attackers to remotely inject JavaScript syntax and execute stored XSS attacks.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾