Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Siva Rajendran

Researcher fromThinking Objects GmbH
#45478of 56,330
6.1Total CVSS
Vulnerabilities · 1
PT-2022-12238
6.1
2022-01-20
Unknown · Afi Webacms · CVE-2021-44829
**Name of the Vulnerable Software and Affected Versions** AFI WebACMS versions through 2.1.0 **Description** A Cross Site Scripting (XSS) issue exists in the index.html file of AFI WebACMS via the `ID` parameter. This allows for potential malicious script execution. **Recommendations** For versions through 2.1.0, consider restricting access to the index.html file or disabling the `ID` parameter to minimize the risk of exploitation until a patch is available.