CVE-2021-3030

CuteSoft Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting (XSS) caused by improper validation of the Theme GET parameter in colorpicker_more.aspx. A remote, unauthenticated attacker can craft a malicious URL that, once opened by a victim in an authenticated session, exe...