Lucene search

K
osvGoogleOSV:CVE-2021-43725
HistoryMar 28, 2022 - 1:15 p.m.

CVE-2021-43725

2022-03-2813:15:07
Google
osv.dev
1

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.7%

There is a Cross Site Scripting (XSS) vulnerability in SpotPage_login.php of Spotweb 1.5.1 and below, which allows remote attackers to inject arbitrary web script or HTML via the data[performredirect] parameter.

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.7%