CVE-2021-40292

CVE-2021-40292 describes a stored cross-site scripting (XSS) vulnerability in DzzOffice 2.02.1 exploitable via the settingnew parameter. Multiple connected records confirm the issue and target version; no concrete exploitation details, impact scope, or remediation are provided in the supplied doc...