CVE-2021-40191

Dzzoffice Version 2.02.1 is affected by cross-site scripting (XSS) due to a lack of sanitization of input data at all upload functions in…

published October 11, 2021

CVSS
—
EPSS
1%
Percentile
42.2
In the wild
Unconfirmed
What it is

Dzzoffice Version 2.02.1 is affected by cross-site scripting (XSS) due to a lack of sanitization of input data at all upload functions in webroot/dzz/attach/Uploader.class.php and return a wrong response in content-type of output data in webroot/dzz/attach/controller.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00503 · 42.2th percentile
Published
2021-10-11T13:34Z
EPSS history
Timeline
  • 11 OCT 13:34Z
    Dzzoffice Version 2.02.1 is affected by cross-site scripting (XSS) due to a lack of sanitization of input data at all upload functions in…
    cvelistv5