CVE-2021-43673

2021-12-0312:15:07

Google

osv.dev

dzzoffice cross site scripting vulnerability

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

37.8%

JSON

dzzoffice 2.02.1_SC_UTF8 is affected by a Cross Site Scripting (XSS) vulnerability in explorerfile.php. The output of the exit function is printed for the user via exit(json_encode($return)).

References

github.com/zyx0814/dzzoffice/issues/188