CVE-2021-43681

2021-12-0213:15:07

Google

osv.dev

sakurapanel

xss

vulnerability

posthandler.php

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

37.8%

JSON

SakuraPanel v1.0.1.1 is affected by a Cross Site Scripting (XSS) vulnerability in /master/core/PostHandler.php. The exit function will terminate the script and print the message $data[‘proxy_name’].

References

github.com/ZeroDream-CN/SakuraPanel/issues/23