CVE-2021-26636CWE-79CWE-89

Maxboard Remote Code Execution

High · published June 22, 2022

CVSS v3.1
8.8
EPSS
2%
Percentile
74.4
In the wild
Unconfirmed
What it is

Stored XSS and SQL injection vulnerability in MaxBoard could lead to occur Remote Code Execution, which could lead to information exposure and privilege escalation.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01522 · 74.4th percentile
Weaknesses
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'); CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2022-06-22T13:55Z
EPSS history
Timeline
  • 22 JUN 13:55Z
    Maxboard Remote Code Execution
    cvelistv5