Security Advisory

CVE-2021-37365

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-08-10 15:15:02

Last updated 2024-08-04 01:16:03

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

CTparental before 4.45.03 is vulnerable to cross-site scripting (XSS) in the CTparental admin panel. In bl_categires_help.php, the 'categories' variable is assigned with the content of the query string param 'cat' without sanitization or encoding, enabling an attacker to inject malicious code into the output webpage.

← Browse all CVEs View on cve.org ↗