← All advisories

Medium severity6.1NVD Advisory· Published Jan 27, 2021· Updated Jun 17, 2026

CVE-2021-3318

CVE-2021-3318

Description

attach/ajax.php in DzzOffice through 2.02.1 allows XSS via the editorid parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Dzzoffice/Dzzoffice
cpe:2.3:a:dzzoffice:dzzoffice:*:*:*:*:*:*:*:*
Range: <=2.02.1
DzzOffice/DzzOfficedescription

Patches

Vulnerability mechanics

References

2

packetstormsecurity.com/files/162314/DzzOffice-2.02.1-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry
github.com/zyx0814/dzzoffice/issues/173nvdIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.