CVE-2021-40923

2021-10-0116:15:07

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.1%

JSON

Cross-site scripting (XSS) vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the email parameter.

CPENameOperatorVersion
bugseq1.8
bugseq1.2.3
bugseq1.2
bugseqbugs_132
bugseq1.7
bugseq1.5
bugseq1.2.2
bugseq1.1
bugseq1.1.1
bugseq1.6

Name	Operator	Version
bugs	eq	1.8
bugs	eq	1.2.3
bugs	eq	1.2
bugs	eq	bugs_132
bugs	eq	1.7
bugs	eq	1.5
bugs	eq	1.2.2
bugs	eq	1.1
bugs	eq	1.1.1
bugs	eq	1.6

Rows per page:

1-10 of 171

References

github.com/pixeline/bugs

github.com/pixeline/bugs/issues/552