PT-2021-14181
CVE-2021-20724
·
Published
2021-05-24
·
Updated
2021-05-28
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Telop01 free edition version 1.0.1 and earlier
Description:
A reflected cross-site scripting issue in the admin page allows a remote attacker to inject an arbitrary script via unspecified vectors. This enables the attacker to execute malicious scripts on the victim's browser, potentially leading to unauthorized actions or data theft.
Recommendations:
For Telop01 free edition version 1.0.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾