CVE-2021-38603
PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field.
- Affected products
- Pluxml
- Pluxml
- = 5.8.7
- CVSS 3.1
- 4.8 MEDIUM
- EPSS
- 1.1% (64th percentile)
- Weakness
- CWE-79
- NVD status
- Modified
- Published
- 2021-08-12
CVE-2021-38603 at NVD
2 known exploits for CVE-2021-38603
Proof-of-concept code and exploit modules indexed by Sploitus