CVE-2021-3159

CVE-2021-3159 is a stored XSS vulnerability in Landray EKP v12.0.9.R.20160325, specifically in the /sys/attachment/uploaderServlet component. A crafted SVG, SHTML, or MHT file can cause the application to execute arbitrary web scripts or HTML. Documented impacts in the provided sources align with...