Adobe InDesign < 16.2.1 Multiple Vulnerabilities (APSB21-22)

The version of Adobe InDesign installed on the remote Windows host is prior or equal to 16.2.1. It is, therefore, affected by multiple out-of-bounds write vulnerabilities that could lead to code execution in the context of the current user. Note that Nessus has not attempted to exploit these issu...

CVE-2021-21043 Reflected Cross-site Scripting (XSS) on version-compare and page-compare tools

ACS Commons version 4.9.2 and earlier suffers from a Reflected Cross-site Scripting XSS vulnerability in version-compare and page-compare due to invalid JCR characters that are not handled correctly. An attacker could potentially exploit this vulnerability to inject malicious JavaScript content...

CVE-2021-21043

CVE-2021-21043 affects ACS Commons 4.9.2 and earlier, with a Reflected XSS in version-compare and page-compare caused by invalid JCR characters not handled properly. An attacker could inject arbitrary JavaScript into vulnerable fields and execute it in the victim’s browser, with exploitation requ...