2 matches found
CVE-2021-25925
in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting XSS due to user input not being validated properly when processed by the server. Therefore, an attacker can inject arbitrary JavaScript code inside the application, and possibly steal a user’s sensitive...
5.4CVSS6.3AI score0.0066EPSS
SaveExploits1
Cross-Site Scripting (XSS)
sickrage is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser due to lack input validation and output sanitization...
5.4CVSS2.7AI score0.0066EPSS
SaveExploits1References2Affected Software1
20