2 matches found
CVE-2021-32852
Countly, a product analytics solution, is vulnerable to cross-site scripting prior to version 21.11 of the community edition. The victim must follow a malicious link or be redirected there from malicious web site. The attacker must have an account or be able to create one. This issue is patched i...
9CVSS6AI score0.0093EPSS
SaveExploits1
PT-2023-12184 · Countly · Countly
Name of the Vulnerable Software and Affected Versions: Countly versions prior to 21.11 Description: The issue allows for cross-site scripting. To exploit this, the victim must follow a malicious link or be redirected from a malicious website. The attacker needs to have an account or be able to...
9CVSS8.6AI score0.0093EPSS
SaveExploits1References9
20