CVE-2021-4255

Name of the Vulnerable Software and Affected Versions ctrlo lenio (affected versions not specified)

Description A vulnerability was found in ctrlo lenio and classified as problematic. It affects some unknown functionality of the file views/contractor.tt. The manipulation of the contractor.name argument leads to cross-site scripting. The attack may be launched remotely.

Recommendations It is recommended to apply a patch to fix this issue. The name of the patch is e1646d5cd0a2fbab9eb505196dd2ca1c9e4cdd97. As a temporary workaround, consider restricting the manipulation of the contractor.name argument to minimize the risk of exploitation.