PT-2022-11603 · As+1 · As
CVE-2021-4251
·
Published
2022-12-18
·
Updated
2022-12-22
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
as (affected versions not specified)
Description
A vulnerability was found in the function
getFullURL of the file include.cdn.php. The manipulation leads to cross-site scripting. The attack can be initiated remotely.Recommendations
Apply a patch to fix this issue. The name of the patch is
4acad1e3d2c34c017473ceea442fb3e3e078b2bd. As a temporary workaround, consider disabling the getFullURL function until a patch is available.Fix
Improper Neutralization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
As