CVE-2021-27888

ZendTo before 6.06-4 Beta allows XSS during the display of a drop-off in which a filename has unexpected characters...

CVE-2021-27888

CVE-2021-27888 affects ZendTo prior to version 6.06-4 Beta. The issue is a cross-site scripting (XSS) vulnerability triggered during the display of a drop-off when a filename contains unexpected characters. Connected sources consistently describe the same flaw across multiple aggregations. The su...