Non notée
CVE-2021-20103 Machform prior to version 16 is vulnerable to stored cross-site scripting due to insufficient sanitization of file…
Description
Machform prior to version 16 is vulnerable to stored cross-site scripting due to insufficient sanitization of file attachments uploaded with forms through upload.php.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| AppNitro Machform | Versions non publiées |
Autres CVE de AppNitro Machform
Les 5 CVE de AppNitro Machform →
CVE-2021-20105
Machform prior to version 16 is vulnerable to an open redirect in Safari_init.php due to an improperly sanitized 'ref'…
Non notée
CVE-2021-20104
Machform prior to version 16 is vulnerable to unauthenticated remote code execution due to insufficient sanitization…
Non notée
CVE-2021-20102
Machform prior to version 16 is vulnerable to cross-site request forgery due to a lack of CSRF tokens in place
Non notée
CVE-2021-20101
Machform prior to version 16 is vulnerable to HTTP host header injection due to improperly validated host headers
Non notée