Security Advisory

CVE-2021-44118

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-01-26 11:07:57

Last updated 2024-08-04 04:10:17

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability. To exploit the vulnerability, a visitor must browse to a malicious SVG file. The vulnerability allows an authenticated attacker to inject malicious code running on the client side into web pages visited by other users (stored XSS).

← Browse all CVEs View on cve.org ↗