CVE-2021-43696

twmap v2.91v4.33 is affected by a Cross Site Scripting XSS vulnerability. In file list.php, the exit function will terminate the script and print the message to the user. The message will contain $REQUEST then there is a XSS vulnerability...

CVE-2021-43696

CVE-2021-43696 (twmap) affects versions 2.91 through 4.33 of twmap, with a Cross Site Scripting (XSS) vulnerability in the list.php file. The root cause is the exit function printing a message that includes user-controlled input ($_REQUEST), enabling script injection. Impact is limited to the abi...