CVE-2021-45888

An issue was discovered in PONTON X/P Messenger before 3.11.2

published March 13, 2022

CVSS
—
EPSS
1%
Percentile
47.2
In the wild
Unconfirmed
What it is

An issue was discovered in PONTON X/P Messenger before 3.11.2. The navigation tree that is shown on the left side of every page of the web application is vulnerable to XSS: it allows injection of JavaScript into its nodes. Creating such nodes is only possible for users who have the role Configuration Administrator or Administrator.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00585 · 47.2th percentile
Published
2022-03-13T01:18Z
EPSS history
Timeline
  • 13 MAR 01:18Z
    An issue was discovered in PONTON X/P Messenger before 3.11.2
    cvelistv5