CVE-2021-43686

2021-12-0213:15:07

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.2%

JSON

nZEDb v0.4.20 is affected by a Cross Site Scripting (XSS) vulnerability in www/pages/api.php. The exit function will terminate the script and print the message which has the input $_GET[‘t’].

CPENameOperatorVersion
nzedbeq0.4.1
nzedbeq0.4.10-1
nzedbeq0.4.9
nzedbeq0.4.14
nzedbeq0.4.4
nzedbeq0.4.3
nzedbeq0.3.13
nzedbeq0.4.2-2
nzedbeq0.3.12-3
nzedbeq0.3.2