CVE-2021-40888

Projectsend version r1295 is affected by Cross Site Scripting (XSS) due to lack of sanitization when echo output data in returnFilesIds() function. A...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Projectsend version r1295 is affected by Cross Site Scripting (XSS) due to lack of sanitization when echo output data in returnFilesIds() function. A low privilege user can call this function through process.php file and execute scripting code.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

参照URL

advisory github.com
report github.com