CVE-2021-27678

2021-03-1116:23:07

mitre

www.cve.org

cve-2021-27678

snippets

batflat cms

cross-site scripting

remote attackers

arbitrary web script

html

field name

EPSS

0.001

Percentile

31.2%

JSON

Cross-site scripting (XSS) vulnerability in Snippets in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the field name.

References

github.com/sruupl/batflat/issues/105

EPSS

0.001

Percentile

31.2%

JSON

Related for CVELIST:CVE-2021-27678