Lucene search

K
osvGoogleOSV:CVE-2021-40970
HistoryOct 01, 2021 - 4:15 p.m.

CVE-2021-40970

2021-10-0116:15:07
Google
osv.dev
4

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.1%

Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the username parameter.

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.1%