PT-2021-11391

CVE-2020-27406

Published

2021-11-02

Updated

2021-11-03

CVSS 3.1

5.4

Medium

MetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: DynPG version 4.9.1

Description: The issue allows authenticated attackers to execute arbitrary code via the groupname. This is a Cross Site Scripting (XSS) issue.

Recommendations: For DynPG version 4.9.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾