6.1
Medium
CVE-2021-32853 Erxes, an experience operating system (XOS) with a set of plugins, is vulnerable to cross-site scripting in versions…
Description
Erxes, an experience operating system (XOS) with a set of plugins, is vulnerable to cross-site scripting in versions 0.22.3 and prior. This results in client-side code execution. The victim must follow a malicious link or be redirected there from malicious web site. There are no known patches.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| erxes | 0.22.3 | No fix stated |
References
- securitylab.github.com securitylab.github.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified