Lucene search

MitreCVE-2021-43141

HistoryNov 03, 2021 - 7:15 p.m.

CVE-2021-43141

2021-11-0319:15:07

CWE-79

mitre

web.nvd.nist.gov

In Wild

cve-2021-43141

cross site scripting

xss

sourcecodester simple subscription website 1.0

security vulnerability

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.003

Percentile

71.8%

JSON

Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Simple Subscription Website 1.0 via the id parameter in plan_application.

Affected configurations

Nvd

Node

simple_subscription_website_projectsimple_subscription_websiteMatch1.0

VendorProductVersionCPE
simple_subscription_website_projectsimple_subscription_website1.0cpe:2.3:a:simple_subscription_website_project:simple_subscription_website:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
simple_subscription_website_project	simple_subscription_website	1.0	cpe:2.3:a:simple_subscription_website_project:simple_subscription_website:1.0:::::::*

References

github.com/Dir0x/CVE-2021-43141

github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-43141

streamable.com/8gydfs

www.nu11secur1ty.com/2021/11/cve-2021-43141.html

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.003

Percentile

71.8%

JSON

Related for CVE-2021-43141