CVE-2021-37365

CTparental before 4.45.03 is vulnerable to cross-site scripting (XSS) in the CTparental admin panel

published August 10, 2021

CVSS
—
EPSS
1%
Percentile
52.0
In the wild
Unconfirmed
What it is

CTparental before 4.45.03 is vulnerable to cross-site scripting (XSS) in the CTparental admin panel. In bl_categires_help.php, the 'categories' variable is assigned with the content of the query string param 'cat' without sanitization or encoding, enabling an attacker to inject malicious code into the output webpage.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00685 · 52.0th percentile
Published
2021-08-10T15:15Z
EPSS history
Timeline
  • 10 AUG 15:15Z
    CTparental before 4.45.03 is vulnerable to cross-site scripting (XSS) in the CTparental admin panel
    cvelistv5