Lucene search

GoogleOSV:CVE-2021-44608

HistoryFeb 24, 2022 - 3:15 p.m.

CVE-2021-44608

2022-02-2415:15:24

Google

osv.dev

cve-2021-44608

cross site scripting

bloofoxcms

file parameter

type parameter

index.php

security vulnerabilities

software

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

24.8%

JSON

Multiple Cross Site Scripting (XSS) vulnerabilities exists in bloofoxCMS 0.5.2.1 - 0.5.1 via the (1) file parameter and (2) type parameter in an edit action in index.php.

References

github.com/alexlang24/bloofoxCMS/issues/12