5.4
CVSSv3

CVE-2021-3151

Published: 27/02/2021 Updated: 03/06/2021
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Vulnerability Summary

i-doit prior to 1.16.0 is affected by Stored Cross-Site Scripting (XSS) issues that could allow remote authenticated malicious users to inject arbitrary web script or HTML via C__MONITORING__CONFIG__TITLE, SM2__C__MONITORING__CONFIG__TITLE, C__MONITORING__CONFIG__PATH, SM2__C__MONITORING__CONFIG__PATH, C__MONITORING__CONFIG__ADDRESS, or SM2__C__MONITORING__CONFIG__ADDRESS.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

i-doit i-doit

Exploits

i-doit version 1152 suffers from a cross site scripting vulnerability ...