CVE-2021-40888

creationtimestamp| type| source ---|---|--- 2021-10-11 14:24:43+00:00| seen| https://t.me/cibsecurity/30327...

CVE-2021-40888

CVE-2021-40888 concerns Projectsend (r1295) with a stored/ reflected XSS caused by lack of sanitization in returnFilesIds() output in the processing path (process.php). A low-privilege user can trigger the function to execute arbitrary script code. The provided documents confirm the vulnerability...