Lucene search
MitreCVELIST:CVE-2021-40888HistoryOct 11, 2021 - 10:04 a.m.
CVE-2021-40888
2021-10-1110:04:39
mitre
www.cve.org
5
projectsend cross site scripting
r1295
lack of sanitization
returnfilesids()
process.php
scripting code
EPSS
0.001
Percentile
21.4%
Projectsend version r1295 is affected by Cross Site Scripting (XSS) due to lack of sanitization when echo output data in returnFilesIds() function. A low privilege user can call this function through process.php file and execute scripting code.
Related
osv
osv
CVE-2021-40888
2021-10-11 11:15:09
nvd
nvd
CVE-2021-40888
2021-10-11 11:15:09
prion
prion
Cross site scripting
2021-10-11 11:15:00
cve
cve
CVE-2021-40888
2021-10-11 11:15:09