CVE-2021-27308

A cross-site scripting (XSS) vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to inject JavaScript via the "redir...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

A cross-site scripting (XSS) vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to inject JavaScript via the "redirect" parameter.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami rum

[{"type":"SEMVER","events":[{"introduced":"1.8.0"},{"fixed":"1.8.1"}]}]

Références

advisory packetstormsecurity.com
advisory github.com
web nvd.nist.gov