CVE-2021-20619

2021-01-1904:55:16

jpcert

www.cve.org

cross-site scripting

growi

v4.2 series

remote attackers

arbitrary script

unspecified vectors

EPSS

0.001

Percentile

48.5%

JSON

Cross-site scripting vulnerability in GROWI (v4.2 Series) versions prior to v4.2.3 allows remote attackers to inject an arbitrary script via unspecified vectors.

CNA Affected

[
  {
    "product": "GROWI v4.2 Series",
    "vendor": "WESEEK, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to v4.2.3"
      }
    ]
  }
]