Lucene search

K
cvelistMitreCVELIST:CVE-2021-28901
HistorySep 15, 2021 - 5:50 p.m.

CVE-2021-28901

2021-09-1517:50:05
mitre
www.cve.org
1
sita software azur
cross-site scripting
remote attackers
html injection
vulnerabilities

EPSS

0.001

Percentile

31.2%

Multiple cross-site scripting (XSS) vulnerabilities exist in SITA Software Azur CMS 1.2.3.1 and earlier, which allows remote attackers to inject arbitrary web script or HTML via the (1) NOM_CLI , (2) ADRESSE , (3) ADRESSE2, (4) LOCALITE parameters to /eshop/products/json/aouCustomerAdresse; and the (5) nom_liste parameter to /eshop/products/json/addCustomerFavorite.

EPSS

0.001

Percentile

31.2%

Related for CVELIST:CVE-2021-28901