CVE-2021-46557

Recent Vulnerabilities Research Posts Trends Blog About Contact

3.5

CVSSv2

Published: 15/02/2022 Updated: 19/02/2022

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3

VMScore: 312

Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Vicidial 2.14-783a exists to contain a cross-site scripting (XSS) vulnerability via the input tabs.

Vulnerable Product	Search on Vulmon	Subscribe to Product
vicidial vicidial 2.14-783a

Vicidial-stored-XSS (CVE-2021-46557) Vicidial is vulnerable to stored cross-site-scripting through the script tab inputs Reproduce go to the vicidial and login then go to /adminphp?ADD=1111111 in the script tab add the following javascript: "<scr<script>alert(1)</script>ipt>alert<script>alert(1)</script&g

CWE-79 https://github.com/Zeyad-Azima/Vicidial-stored-XSS https://nvd.nist.gov https://github.com/Zeyad-Azima/Vicidial-stored-XSS

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2021-46557

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect