CVE-2021-3030

Cute Editor for ASP.NET 6.4 (vendor: CuteSoft) is vulnerable to reflected cross-site scripting (CWE-79) caused by improper validation of the Theme GET parameter in colorpicker_more.aspx. The unsanitized value is reflected into an HTML attribute context, allowing a remote, unauthenticated attacker...