PT-2021-14181

CVE-2021-20724

·

Published

2021-05-24

·

Updated

2021-05-28

Description by

CVSS 3.1
6.1
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: Telop01 free edition version 1.0.1 and earlier
Description: A reflected cross-site scripting issue in the admin page allows a remote attacker to inject an arbitrary script via unspecified vectors. This enables the attacker to execute malicious scripts on the victim's browser, potentially leading to unauthorized actions or data theft.
Recommendations: For Telop01 free edition version 1.0.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾