Unrated severityNVD Advisory· Published Jan 21, 2021· Updated Aug 4, 2024
CVE-2020-21147
CVE-2020-21147
Description
RockOA V1.9.8 is affected by a cross-site scripting (XSS) vulnerability which allows remote attackers to send malicious code to the administrator and execute JavaScript code, because webmain/flow/input/mode_emailmAction.php does not perform strict filtering.
Affected products
2- RockOA/RockOAdescription
Patches
Vulnerability mechanics
References
2- blog.csdn.net/adminxw/article/details/102881463mitrex_refsource_MISC
- github.com/alixiaowei/alixiaowei.github.io/issues/2mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.