CVE-2021-3030

Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme GET parameter in colorpickermore.aspx. A remote, unauthenticated attacker can craft a URL that, once opened by a victim in a browser session authenticated to a site running the...

CVE-2021-3030: Improper Neutralization of Input During Web Page Generation

Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme GET parameter in colorpickermore.aspx. A remote, unauthenticated attacker can craft a URL that, once opened by a victim in a browser session authenticated to a site running the...

CVE-2021-3030

The Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting (XSS) due to improper validation of the Theme GET parameter within the /CuteSoft_Client/CuteEditor/Dialogs/colorpicker_more.aspx component. A remote, unauthenticated attacker can craft a malicious URL that, when opene...

EUVD-2021-34881

Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme GET parameter in colorpickermore.aspx. A remote, unauthenticated attacker can craft a URL that, once opened by a victim in a browser session authenticated to a site running the...