CVE-2021-4035

A stored cross site scripting have been identified at the comments in the report creation due to an obsolote version of tinymce editor. In order to exploit this vulnerability, the attackers needs an account with enough privileges to view and edit reports.
Configurations

Configuration 1 (hide)

cpe:2.3:a:wocu-monitoring:wocu_monitoring:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2022-02-11 18:15

Updated : 2023-11-22 11:15


NVD link : CVE-2021-4035

Mitre link : CVE-2021-4035

CVE.ORG link : CVE-2021-4035


JSON object : View

Products Affected

wocu-monitoring

  • wocu_monitoring
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')