Lucene search

K
cvelistMitreCVELIST:CVE-2021-39412
HistoryNov 05, 2021 - 2:43 p.m.

CVE-2021-39412

2021-11-0514:43:30
mitre
www.cve.org
2
phpgurukul shopping v3.1
cross site scripting
callback parameter
value parameter
php_self parameter

EPSS

0.001

Percentile

34.2%

Multiple Cross Site Scripting (XSS) vulnerabilities exists in PHPGurukul Shopping v3.1 via the (1) callback parameter in (a) server_side/scripts/id_jsonp.php, (b) server_side/scripts/jsonp.php, and © scripts/objects_jsonp.php, the (2) value parameter in examples_support/editable_ajax.php, and the (3) PHP_SELF parameter in captcha/index.php.

EPSS

0.001

Percentile

34.2%

Related for CVELIST:CVE-2021-39412