CVE-2021-26549

An XSS issue was discovered in SmartFoxServer 2.17.0

published February 9, 2021

CVSS
—
EPSS
1%
Percentile
71.2
In the wild
Unconfirmed
What it is

An XSS issue was discovered in SmartFoxServer 2.17.0. Input passed to the AdminTool console is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML code in a user's browser session in context of an affected site.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01347 · 71.2th percentile
Published
2021-02-09T19:03Z
EPSS history
Timeline
  • 09 FEB 19:03Z
    An XSS issue was discovered in SmartFoxServer 2.17.0
    cvelistv5