Not rated
CVE-2021-20103 Machform prior to version 16 is vulnerable to stored cross-site scripting due to insufficient sanitization of file…
Description
Machform prior to version 16 is vulnerable to stored cross-site scripting due to insufficient sanitization of file attachments uploaded with forms through upload.php.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AppNitro Machform | Versions not published |
Other CVEs of AppNitro Machform
The 5 CVEs of AppNitro Machform →
CVE-2021-20105
Machform prior to version 16 is vulnerable to an open redirect in Safari_init.php due to an improperly sanitized 'ref'…
Not rated
CVE-2021-20104
Machform prior to version 16 is vulnerable to unauthenticated remote code execution due to insufficient sanitization…
Not rated
CVE-2021-20102
Machform prior to version 16 is vulnerable to cross-site request forgery due to a lack of CSRF tokens in place
Not rated
CVE-2021-20101
Machform prior to version 16 is vulnerable to HTTP host header injection due to improperly validated host headers
Not rated