Lucene search
MitreCVELIST:CVE-2021-35488HistoryNov 09, 2021 - 10:29 p.m.
CVE-2021-35488
2021-11-0922:29:41
mitre
www.cve.org
0.001 Low
EPSS
Percentile
50.5%
Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&title={TITLE] Reflected XSS via the host or title parameter. An attacker could inject arbitrary JavaScript into status.cgi. The payload would be triggered every time an authenticated user browses the page containing it.
Related
prion
prion
Cross site scripting
2021-11-09 23:15:00
nvd
nvd
CVE-2021-35488
2021-11-09 23:15:08
nuclei
nuclei
Thruk 2.40-2 - Cross-Site Scripting
2022-08-14 21:31:30
cve
cve
CVE-2021-35488
2021-11-09 23:15:08