CVE-2021-33904

In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS

published June 7, 2021

CVSS
—
EPSS
10%
Percentile
95.6
In the wild
Unconfirmed
What it is

In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS. NOTE: The vendor states "there are configurable security flags and we are unable to reproduce them with the available information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09972 · 95.6th percentile
Published
2021-06-07T11:40Z
EPSS history
Timeline
  • 07 JUN 11:40Z
    In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS
    cvelistv5