Lucene search
AfianFilerun2021.03.26
2 matches found
CVE-2021-35503
Afian FileRun 2021.03.26 allows stored XSS via an HTTP X-Forwarded-For header that is mishandled when rendering Activity Logs.
6.1CVSS6.5AI score0.0024EPSS
CVE-2021-35506
Afian FileRun 2021.03.26 allows XSS when an administrator encounters a crafted document during use of the HTML Editor for a preview or edit action.
6.1CVSS5.9AI score0.00281EPSS