CVE-2021-45843

creationtimestamp| type| source ---|---|--- 2022-09-29 07:45:02+00:00| seen| https://t.me/cibsecurity/50679...

CVE-2021-45843

CVE-2021-45843 affects glFusion CMS v1.7.9. The vulnerability is a reflected Cross Site Scripting (XSS) where the value of the title parameter is copied into an HTML attribute enclosed in double quotes and echoed unmodified in the response. Documented impact indicates potential script injection; ...

CVE-2021-45843

glFusion CMS v1.7.9 is affected by a reflected Cross Site Scripting XSS vulnerability. The value of the title request parameter is copied into the value of an HTML tag attribute which is encapsulated in double quotation marks. This input was echoed unmodified in the application's response...