Lucene search

K
cvelistGitHub_MCVELIST:CVE-2021-41175
HistoryOct 26, 2021 - 2:10 p.m.

CVE-2021-41175 Stored XSS in Client Groups Management (Authenticated)

2021-10-2614:10:12
CWE-79
GitHub_M
raw.githubusercontent.com
2

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.8%

Pi-hole’s Web interface (based on AdminLTE) provides a central location to manage one’s Pi-hole and review the statistics generated by FTLDNS. Prior to version 5.8, cross-site scripting is possible when adding a client via the groups-clients management page. This issue was patched in version 5.8.

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.8%

Related for CVELIST:CVE-2021-41175