CVE-2021-3010

2021-02-2614:12:19

mitre

www.cve.org

xss

opentext

content server

remote attacker

javascript

form values

sanitization

vulnerability

EPSS

0.001

Percentile

48.5%

JSON

There are multiple persistent cross-site scripting (XSS) vulnerabilities in the web interface of OpenText Content Server Version 20.3. The application allows a remote attacker to introduce arbitrary JavaScript by crafting malicious form values that are later not sanitized.