In short
- CVE-2021-39391 is a MEDIUM (CVSS 6.1) vulnerability affecting github.com/beego/beego/v2, beego (beego).
- Chance of exploitation in the next 30 days (EPSS): 0.80%, higher than 56.4% of all vulnerabilities.
- Fix: update to 2.0.2 or later.
Description
Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated by administrators viewing the "Request Statistics" page.
NVD description
Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated by administrators viewing the "Request Statistics" page.
More vulnerabilities in github.com/beego/beego/v2
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free