CVE-2021-25984 FactorJS - Stored Cross-Site Scripting (XSS) in Post Reply Functionality

In Factor App Framework & Headless CMS forum plugin, versions v1.3.3 to v1.8.30, are vulnerable to stored Cross-Site Scripting XSS at the “post reply” section. An unauthenticated attacker can execute malicious JavaScript code and steal the session cookies...

CVE-2021-25984

CVE-2021-25984 affects Factor (App Framework & Headless CMS) forum plugin, versions v1.3.3–v1.8.30. The root cause is stored XSS in the post reply functionality, allowing unauthenticated attackers to execute malicious JavaScript and steal session cookies. No remediation details are provided in th...