4 matches found
CVE-2021-41943
Logrhythm Web Console 7.4.9 allows for HTML tag injection through Contextualize Action - Create a new Contextualize Action - Inject your HTML tag in the name field...
6.1CVSS7AI score0.00484EPSS
SaveExploits0
CVE-2021-41943
creationtimestamp| type| source ---|---|--- 2022-12-13 02:21:11+00:00| seen| https://t.me/cibsecurity/54368 2023-12-01 08:53:23+00:00| seen| https://t.me/arpsyndicate/847...
6.1CVSS6.3AI score0.00484EPSS
SaveExploits0References2
CVE-2021-41943
CVE-2021-41943 affects Logrhythm Web Console 7.4.9, where HTML tag injection is possible in the Contextualize Action name field. The root cause is injection of HTML markup into that field, enabling potential HTML-based manipulation. The sources do not provide exploit details or a fixed patch/vers...
6.1CVSS6.4AI score0.00484EPSS
SaveExploits0References1Affected Software1
20