Lucene search

K
cvelistMitreCVELIST:CVE-2021-3395
HistoryFeb 02, 2021 - 8:43 p.m.

CVE-2021-3395

2021-02-0220:43:34
mitre
www.cve.org
1
cross-site scripting
pryaniki
arbitrary file upload
remote authenticated users
javascript code
attachment

EPSS

0.001

Percentile

29.2%

A cross-site scripting (XSS) vulnerability in Pryaniki 6.44.3 allows remote authenticated users to upload an arbitrary file. The JavaScript code will execute when someone visits the attachment.

EPSS

0.001

Percentile

29.2%

Related for CVELIST:CVE-2021-3395