2 matches found
CVE-2021-38113: Improper Neutralization of Input During Web Page Generation
In addBouquet in js/bqe.js in OpenWebif aka e2openplugin-OpenWebif through 1.4.7, inserting JavaScript into the Add Bouquet feature of the Bouquet Editor i.e., bouqueteditor/api/addbouquet?name= leads to Stored XSS...
5.4CVSS5.8AI score0.00522EPSS
SaveExploits1References2
20