Lucene search
PRIOn knowledge basePRION:CVE-2021-37330HistoryOct 04, 2021 - 2:15 p.m.
Cross site scripting
2021-10-0414:15:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
25.0%
Laravel Booking System Booking Core 2.0 is vulnerable to Cross Site Scripting (XSS). The Avatar upload in the My Profile section could be exploited to upload a malicious SVG file which contains Javascript. Now if another user/admin views the profile and clicks to view his avatar, an XSS will trigger.
| CPE | Name | Operator | Version |
|---|---|---|---|
| booking_core | eq | 2.0 |
Related
nvd
nvd
CVE-2021-37330
2021-10-04 14:15:07
cvelist
cvelist
CVE-2021-37330
2021-10-04 13:35:50
cve
cve
CVE-2021-37330
2021-10-04 14:15:07