Cross site scripting via HTML attributes in the back end

🗓️ 25 Aug 2021 14:45:01Reported by GitHub Advisory DatabaseType

Cross site scripting risk in back en

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2021-35955	12 Aug 202118:39	–	circl
CNNVD	Contao 跨站脚本漏洞	12 Aug 202100:00	–	cnnvd
Contao	Cross site scripting via HTML attributes in the back end	11 Aug 202100:00	–	contao
CVE	CVE-2021-35955	12 Aug 202114:33	–	cve
Cvelist	CVE-2021-35955	12 Aug 202114:33	–	cvelist
EUVD	EUVD-2021-1756	7 Oct 202500:30	–	euvd
Friends Of PHP	Cross site scripting via HTML attributes in the back end	1 Jan 197000:00	–	friendsofphp
Friends Of PHP	Cross site scripting via HTML attributes in the back end	1 Jan 197000:00	–	friendsofphp
NVD	CVE-2021-35955	12 Aug 202115:15	–	nvd
OSV	GHSA-HR3H-X6GQ-RQCP Cross site scripting via HTML attributes in the back end	25 Aug 202114:45	–	osv

Vulners

Node

contao core-bundleRange4.10.0–4.11.7composer

contao core-bundleRange4.5.0–4.9.18composer

contao contaoRange4.10.0–4.11.7composer

contao contaoRange4.5.0–4.9.18composer

contao contaoRange4.0.0–4.4.56composer

contao core-bundleRange4.0.0–4.4.56composer

Source	Link
github	www.github.com/contao/contao/security/advisories/GHSA-hr3h-x6gq-rqcp
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-35955
contao	www.contao.org/en/news/contao-4-9-16-and-4-11-5-are-available.html
contao	www.contao.org/en/security-advisories/cross-site-scripting-via-html-attributes-in-the-back-end.html
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2021-35955.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/contao/core-bundle/CVE-2021-35955.yaml
github	www.github.com/advisories/GHSA-hr3h-x6gq-rqcp

05 Feb 2024 10:37Current

5.5Medium risk

Vulners AI Score5.5

CVSS 23.5

CVSS 3.14.8

EPSS0.00364