Lucene search
China National Vulnerability DatabaseCNVD-2021-99270HistoryOct 13, 2021 - 12:00 a.m.
DzzOffice Cross-Site Scripting Vulnerability (CNVD-2021-99270)
2021-10-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
dzzoffice
cross-site scripting
vulnerability
enterprise collaboration
google enterprise application
microsoft office 365
version 2.02.1
stored xss
EPSS
0.001
Percentile
24.8%
Dzzoffice is an open source office suite for enterprises and teams to build their own enterprise collaboration platform similar to “Google Enterprise Application Suite” and “Microsoft Office 365”. Version 2.02.1 is vulnerable to a stored cross-site scripting vulnerability. An attacker can use the settingnew parameter to inject malicious code.
Related
nvd
nvd
CVE-2021-40292
2021-10-12 18:15:08
cvelist
cvelist
CVE-2021-40292
2021-10-12 17:31:05
osv
osv
CVE-2021-40292
2021-10-12 18:15:08
prion
prion
Cross site scripting
2021-10-12 18:15:00
cve
cve
CVE-2021-40292
2021-10-12 18:15:08