CVE-2021-3030

Cute Editor for ASP.NET 6.4 (vendor: CuteSoft) is vulnerable to reflected cross-site scripting (CWE-79) caused by improper validation of the Theme GET parameter in colorpicker_more.aspx. The unsanitized value is reflected into an HTML attribute context, allowing a remote, unauthenticated attacker...

CVE-2021-3030

Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme GET parameter in colorpickermore.aspx. A remote, unauthenticated attacker can craft a URL that, once opened by a victim in a browser session authenticated to a site running the...

EUVD-2021-34881

Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme GET parameter in colorpickermore.aspx. A remote, unauthenticated attacker can craft a URL that, once opened by a victim in a browser session authenticated to a site running the...