2 matches found
CVE-2021-26123: Improper Neutralization of Input During Web Page Generation
LivingLogic XIST4C before 0.107.8 allows XSS via login.htm, login.wihtm, or login-form.htm...
6.1CVSS5.8AI score0.00672EPSS
SaveExploits1References2
LivingLogic XIST4C 跨站脚本漏洞
XIST4C is a content management system, shopping cart software and web application framework from LivingLogic. A cross-site scripting vulnerability exists in LivingLogic XIST4C versions prior to 0.107.8. The vulnerability can be exploited to conduct cross-site scripting attacks via login.htm,...
6.1CVSS5.2AI score0.00672EPSS
SaveExploits1References2
20