CVE-2021-20829

2021-09-2109:25:10

jpcert

www.cve.org

cve-2021-20829

cross-site scripting

growi

EPSS

0.001

Percentile

47.5%

JSON

Cross-site scripting vulnerability due to the inadequate tag sanitization in GROWI versions v4.2.19 and earlier allows remote attackers to execute an arbitrary script on the web browser of the user who accesses a specially crafted page.

CNA Affected

[
  {
    "product": "GROWI",
    "vendor": "WESEEK, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "versions v4.2.19 and earlier"
      }
    ]
  }
]