CVE-2021-39420

Multiple Cross Site Scripting XSS vulnerabilities exist in VFront 0.99.5 via the 1 s parameter in searchall.php and the 2 msg parameter in add.attach.php...

CVE-2021-39420

CVE-2021-39420 affects VFront 0.99.5 and is a cross-site scripting (XSS) vulnerability exposed via two input vectors: the s parameter in search_all.php and the msg parameter in add.attach.php. The public descriptions indicate XSS; no exploitation details or patch/version remediation are provided ...