Lucene search

K
osvGoogleOSV:CVE-2021-3355
HistoryFeb 24, 2021 - 3:15 p.m.

CVE-2021-3355

2021-02-2415:15:13
Google
osv.dev
2

6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.5%

A stored-self XSS exists in LightCMS v1.3.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/SensitiveWords.

6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.5%