1 matches found
CVE-2021-27778: Improper Neutralization of Input During Web Page Generation
HCL Traveler is vulnerable to a cross-site scripting XSS caused by improper validation of the Name parameter for Approved Applications in the Traveler administration web pages. An attacker could exploit this vulnerability to execute a malicious script to access any cookies, session tokens, or oth...
4.9CVSS5.7AI score0.00379EPSS
SaveExploits0References3
20