Lucene search

[email protected]CVE-2021-43141

HistoryNov 03, 2021 - 7:15 p.m.

CVE-2021-43141

2021-11-0319:15:07

CWE-79

[email protected]

web.nvd.nist.gov

In Wild

cve-2021-43141

cross site scripting

xss

sourcecodester simple subscription website 1.0

security vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.003 Low

EPSS

Percentile

71.9%

JSON

Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Simple Subscription Website 1.0 via the id parameter in plan_application.

Affected configurations

NVD

Node

simple_subscription_website_projectsimple_subscription_websiteMatch1.0

CPENameOperatorVersion
simple_subscription_website_project:simple_subscription_websitesimple subscription website project simple subscription websiteeq1.0

CPE	Name	Operator	Version
simple_subscription_website_project:simple_subscription_website	simple subscription website project simple subscription website	eq	1.0

References

github.com/Dir0x/CVE-2021-43141

github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-43141

streamable.com/8gydfs

www.nu11secur1ty.com/2021/11/cve-2021-43141.html

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.003 Low

EPSS

Percentile

71.9%

JSON

Related for CVE-2021-43141

cnvd1 cvelist1 attackerkb1 nvd1 prion1