CVE-2021-43686

CVE-2021-43686 affects nZEDb v0.4.20. The vulnerability is a Cross Site Scripting (XSS) in www/pages/api.php where the exit function terminates the script and prints the value provided via the input parameter $_GET['t']. The root cause is improper handling/filtering of input data in that path, en...