Lucene search

K
osvGoogleOSV:CVE-2021-40968
HistoryOct 01, 2021 - 4:15 p.m.

CVE-2021-40968

2021-10-0116:15:07
Google
osv.dev
2

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.1%

Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter.

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.1%