CVE-2021-27528

A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "refID" parameter...

CVE-2021-27528

creationtimestamp| type| source ---|---|--- 2021-03-23 17:38:21+00:00| seen| https://t.me/cibsecurity/25310...

CVE-2021-27528

DynPG 4.9.2 is affected by a cross-site scripting (XSS) vulnerability exploitable via the refID parameter. The issue permits remote attackers to inject JavaScript into victims’ sessions, with impact described as browser-level compromise for affected users. CVSS metrics included in the record show...