CVE-2020-21147

RockOA V1.9.8 is affected by a cross-site scripting (XSS) vulnerability which allows remote attackers to send malicious code to the administrator and execute…

published January 21, 2021

CVSS
—
EPSS
1%
Percentile
56.7
In the wild
Unconfirmed
What it is

RockOA V1.9.8 is affected by a cross-site scripting (XSS) vulnerability which allows remote attackers to send malicious code to the administrator and execute JavaScript code, because webmain/flow/input/mode_emailmAction.php does not perform strict filtering.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00817 · 56.7th percentile
Published
2021-01-21T20:42Z
EPSS history
Timeline
  • 21 JAN 20:42Z
    RockOA V1.9.8 is affected by a cross-site scripting (XSS) vulnerability which allows remote attackers to send malicious code to the administrator and execute…
    cvelistv5