Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-103397
HistoryDec 23, 2021 - 12:00 a.m.

Lemon OA Cross-Site Scripting Vulnerability (CNVD-2021-103397)

2021-12-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
lemon oa
cross-site scripting
security vulnerability
java language
webportalcontroller.java

EPSS

0.001

Percentile

37.9%

Lemon OA is an open source office OA system developed by XuHuisheng personal developer using the Java language.Lemon OA version V1.10.0 has a security vulnerability that originates from the potrtalItemName parameter in webPortalController.java. An attacker can use the vulnerability to execute arbitrary web script or HTML.

EPSS

0.001

Percentile

37.9%

Related for CNVD-2021-103397