CVE-2021-26702

EPrints 3.4.2 exposes a reflected XSS opportunity in the dataset parameter to the cgi/datasetdictionary URI...

PT-2021-17099

Name of the Vulnerable Software and Affected Versions EPrints version 3.4.2 Description The issue allows for a reflected XSS opportunity. This is due to the dataset parameter in the "cgi/dataset dictionary" URI being vulnerable. Recommendations For EPrints version 3.4.2, update to a newer version...