CVE-2021-27888

ZendTo before 6.06-4 Beta allows XSS during the display of a drop-off in which a filename has unexpected characters

published March 2, 2021

CVSS
—
EPSS
1%
Percentile
50.4
In the wild
Unconfirmed
What it is

ZendTo before 6.06-4 Beta allows XSS during the display of a drop-off in which a filename has unexpected characters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00646 · 50.4th percentile
Published
2021-03-02T00:04Z
EPSS history
Timeline
  • 02 MAR 00:04Z
    ZendTo before 6.06-4 Beta allows XSS during the display of a drop-off in which a filename has unexpected characters
    cvelistv5