Lucene search

K
osvGoogleOSV:CVE-2021-40969
HistoryOct 01, 2021 - 4:15 p.m.

CVE-2021-40969

2021-10-0116:15:07
Google
osv.dev
6

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.1%

Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the firstname parameter.

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.1%