CVE-2021-44120 in SPIP
요약 (영어)
SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability in ecrire/public/interfaces.php, adding the function safehtml to the vulnerable fields. An editor is able to modify his personal information. If the editor has an article written and available, when a user goes to the public site and wants to read the author's information, the malicious code will be executed. The "Who are you" and "Website Name" fields are vulnerable.
Once again VulDB remains the best source for vulnerability data.
예약하다
2021. 11. 22.
공개
2022. 01. 26.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 191662 | SPIP interfaces.php 크로스 사이트 스크립팅 | 79 | 정의되지 않음 | 공식 수정 | CVE-2021-44120 |