2 matches found
CVE-2021-33904
In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS. NOTE: The vendor states "there are configurable security flags and we are unable to reproduce them with the available information...
6.1CVSS0.09972EPSS
SaveExploits5References2
CVE-2021-33904: Improper Neutralization of Input During Web Page Generation
In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS. NOTE: The vendor states "there are configurable security flags and we are unable to reproduce them with the available information...
6.1CVSS5.8AI score0.09972EPSS
SaveExploits5References2
20