CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Cvelist•added 2021/01/22 8:30 a.m.•33 views

CVE-2021-22849 Hyweb HyCMS-J1 - Stored XSS

Hyweb HyCMS-J1 backend editing function does not filter special characters. Users after log-in can inject JavaScript syntax to perform a stored XSS Stored Cross-site scripting attack...

4.6CVSS5.4AI score0.00509EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2021/01/22 12:00 a.m.•3 views

CVE-2021-22849: Improper Neutralization of Input During Web Page Generation

Hyweb HyCMS-J1 backend editing function does not filter special characters. Users after log-in can inject JavaScript syntax to perform a stored XSS Stored Cross-site scripting attack...

5.4CVSS5.8AI score0.00509EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by