Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/01 12:00 a.m.•1 views

CVE-2021-41461: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in concrete/elements/collectionadd.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the mode parameter...

6.1CVSS6AI score0.00845EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/01 12:00 a.m.•4 views

CVE-2021-41464: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in concrete/elements/collectionadd.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the rel parameter...

6.1CVSS6AI score0.00845EPSS
SaveExploits1References2
Rows per page
Query Builder