CVE-2021-42080

Affected software : OSNEXUS QuantaStor (before 6.0.0.355). Vulnerability : CVE-2021-42080 – Reflected XSS via a crafted URL in the QuantaStor web interface (qstorapi/echo?inputMessage). Root cause : improper handling/encoding of user-supplied input reflected in the response. Impact : potential to...