CVE-2021-3150

A cross-site scripting XSS vulnerability on the Delete Personal Data page in Cryptshare Server before 4.8.0 allows an attacker to inject arbitrary web script or HTML via the user name. The issue is fixed with the version 4.8.1...

CVE-2021-3150

CVE-2021-3150 is a cross-site scripting (XSS) vulnerability in Cryptshare Server prior to 4.8.0 on the Delete Personal Data page, exploitable via the user name. Multiple sources confirm the issue and indicate the fix is to upgrade to 4.8.1 . The NVD and Red Hat entries describe the same flaw and ...