Kurz gesagt
- CVE-2021-32106 ist eine Schwachstelle (MITTEL (CVSS 5.4)) in icecoder/icecoder, icecoder (icecoder).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.86%, höher als bei 58.6% aller Schwachstellen.
- Abhilfe: auf 8.1 oder neuer aktualisieren.
Description
In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the _GET['replace'] variable. As a result, arbitrary Javascript code can get executed.
NVD description
In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the _GET['replace'] variable. As a result, arbitrary Javascript code can get executed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free