6.1
Moyenne
CVE-2021-32853 Erxes, an experience operating system (XOS) with a set of plugins, is vulnerable to cross-site scripting in versions…
Description
Erxes, an experience operating system (XOS) with a set of plugins, is vulnerable to cross-site scripting in versions 0.22.3 and prior. This results in client-side code execution. The victim must follow a malicious link or be redirected there from malicious web site. There are no known patches.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| erxes | 0.22.3 | Pas de correctif indiqué |
Références
- securitylab.github.com securitylab.github.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification