CVE-2021-27930

CVE-2021-27930 affects IrisNext Edition 9.5.16. The issue consists of multiple stored XSS vulnerabilities that allow an authenticated (or compromised) user to inject malicious JavaScript into folder/file names, enabling theft of other users’ sessions or execution of code in their browsers. The vu...