Cross-site scripting

Two kinds of XSS were found: 1. As mentioned in https://github.com/mongo-express/mongo-express/issues/577 when the content of a cell grows larger than supported size, clicking on a row will show full document unescaped, however this needs admin interaction on cell. 2. Data cells identified as med...

CVE-2021-21422

mongo-express is a web-based MongoDB admin interface, written with Node.js and express. 1: As mentioned in this issue: https://github.com/mongo-express/mongo-express/issues/577, when the content of a cell grows larger than supported size, clicking on a row will show full document unescaped, howev...

Cells Blog 3.4 Cross Site Scripting

----------------------------------------------------------- foun by :kurd-team , Exploiter group : kurdish hackers team contact : [email protected] site : facebook.com/kurdteam ----------------------------------------------------------- ------------------------script-----------------------------...