CVE-2021-3812

2021-09-1707:15:09

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.8%

JSON

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)

CPENameOperatorVersion
adminlteeq2.3.1
adminlteeq5.3.1
adminlteeq2.5.1
adminlteeq0.1
adminlteeq2.0.2
adminlteeq2.0.5
adminlteeq1.2
adminlteeq1.1.0
adminlteeq5.4
adminlteeq5.5

Name	Operator	Version
adminlte	eq	2.3.1
adminlte	eq	5.3.1
adminlte	eq	2.5.1
adminlte	eq	0.1
adminlte	eq	2.0.2
adminlte	eq	2.0.5
adminlte	eq	1.2
adminlte	eq	1.1.0
adminlte	eq	5.4
adminlte	eq	5.5

Rows per page:

1-10 of 721

References

github.com/pi-hole/adminlte/commit/f526716de7bb0fd382a64bcbbb33915c926f94bb

huntr.dev/bounties/875a6885-9a64-46f3-94ad-92f40f989200