Lucene search

K
osvGoogleOSV:CVE-2021-40971
HistoryOct 01, 2021 - 4:15 p.m.

CVE-2021-40971

2021-10-0116:15:00
Google
osv.dev
4

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.1%

Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword1 parameter.

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.1%