CVE-2021-42329 ShinHer Information Co., LTD. ShinHer StudyOnline System - Stored XSS

The “ListAdd” function of message board of ShinHer StudyOnline System does not filter special characters in the title parameter. After logging in with user’s privilege, remote attackers can inject JavaScript and execute stored XSS attacks...

CVE-2021-42329

The CVE-2021-42329 entry concerns ShinHer StudyOnline System. The vulnerability is in the List_Add function of the message board, where the title parameter is not filtered for special characters, allowing stored XSS after a user with privileges logs in. Public details consistently describe the im...