Security Advisory

CVE-2021-38710

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-08-18 14:41:18

Last updated 2024-08-04 01:51:19

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Static (Persistent) XSS Vulnerability exists in version 4.3.0 of Yclas when using the install/view/form.php script. An attacker can store XSS in the database through the vulnerable SITE_NAME parameter.

← Browse all CVEs View on cve.org ↗