Unrated severityNVD Advisory· Published Nov 3, 2021· Updated Aug 4, 2024
CVE-2021-43032
CVE-2021-43032
Description
In XenForo through 2.2.7, a threat actor with access to the admin panel can create a new Advertisement via the Advertising function, and save an XSS payload in the body of the HTML document. This payload will execute globally on the client side.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- XenForo/XenForodescription
Patches
Vulnerability mechanics
References
1- xenforo.com/community/forums/announcements/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.