CVE-2021-30082

Gris CMS v0.1 is affected by a persistent XSS vulnerability in admin/dashboard due to insufficient validation of client data. This allows remote attackers to inject arbitrary script/HTML. CNVD notes potential credential theft; no remediation details are provided in the supplied documents.