Lucene search

K
osvGoogleOSV:CVE-2021-40972
HistoryOct 01, 2021 - 4:15 p.m.

CVE-2021-40972

2021-10-0116:15:07
Google
osv.dev
4

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.1%

Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the mail parameter.

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.1%