Unrated severityNVD Advisory· Published Feb 11, 2022· Updated Sep 16, 2024
Wocu Monitoring stored Cross-Site Scripting (XSS)
CVE-2021-4035
Description
A stored cross site scripting have been identified at the comments in the report creation due to an obsolote version of tinymce editor. In order to exploit this vulnerability, the attackers needs an account with enough privileges to view and edit reports.
Affected products
1- Range: 0.27
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.incibe.es/en/incibe-cert/notices/aviso/wocu-monitoring-stored-cross-site-scripting-xssmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.