CVE-2021-42943

IPPlan 4.92b is affected by a stored XSS vulnerability in admin/usermanager.php, allowing an attacker to inject arbitrary script/HTML via the userid parameter. This is described across multiple sources (NVD/CNVD/CVELIST/CNNVD) referencing the same issue and version. No explicit exploit details, p...