Lucene search

K
osvGoogleOSV:CVE-2021-38113
HistoryAug 04, 2021 - 7:15 p.m.

CVE-2021-38113

2021-08-0419:15:08
Google
osv.dev
2
openwebif
addbouquet
stored xss

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

24.8%

In addBouquet in js/bqe.js in OpenWebif (aka e2openplugin-OpenWebif) through 1.4.7, inserting JavaScript into the Add Bouquet feature of the Bouquet Editor (i.e., bouqueteditor/api/addbouquet?name=) leads to Stored XSS.

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

24.8%

Related for OSV:CVE-2021-38113