Lucene search
Veracode Vulnerability DatabaseVERACODE:33465HistoryDec 28, 2021 - 7:45 a.m.
Cross-site Scripting (XSS)
2021-12-2807:45:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
26.4%
netgen/tagsbundle is vulnerable to cross-site scripting (XSS) attacks. Tags Admin interface does not properly escape user inputs, allowing a malicious user to bypass the filters to inject and execute arbitrary javascript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| netgen/tagsbundle | le | 4.0.14 | |
| netgen/tagsbundle | le | 3.4.10 | |
| netgen/tagsbundle | le | 4.0.14 | |
| netgen/tagsbundle | le | 3.4.10 |
Related
osv
osv
CVE-2021-45895
2021-12-27 21:15:07
Cross-site Scripting in Netgen Tags Bundle
2022-01-06 22:04:19
cve
cve
CVE-2021-45895
2021-12-27 21:15:07
prion
prion
Cross site scripting
2021-12-27 21:15:00
cvelist
cvelist
CVE-2021-45895
2021-12-27 20:10:29
nvd
nvd
CVE-2021-45895
2021-12-27 21:15:07
github
github
Cross-site Scripting in Netgen Tags Bundle
2022-01-06 22:04:19