CVE-2021-40888

Projectsend version r1295 is affected by Cross Site Scripting (XSS) due to lack of sanitization when echo output data in returnFilesIds() function

published October 11, 2021

CVSS
—
EPSS
1%
Percentile
50.3
In the wild
Unconfirmed
What it is

Projectsend version r1295 is affected by Cross Site Scripting (XSS) due to lack of sanitization when echo output data in returnFilesIds() function. A low privilege user can call this function through process.php file and execute scripting code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00644 · 50.3th percentile
Published
2021-10-11T10:04Z
EPSS history
Timeline
  • 11 OCT 10:04Z
    Projectsend version r1295 is affected by Cross Site Scripting (XSS) due to lack of sanitization when echo output data in returnFilesIds() function
    cvelistv5