Lucene search
PRIOn knowledge basePRION:CVE-2021-21043HistoryFeb 02, 2021 - 11:15 p.m.
Cross site scripting
2021-02-0223:15:00
PRIOn knowledge base
www.prio-n.com
11
ACS Commons version 4.9.2 (and earlier) suffers from a Reflected Cross-site Scripting (XSS) vulnerability in version-compare and page-compare due to invalid JCR characters that are not handled correctly. An attacker could potentially exploit this vulnerability to inject malicious JavaScript content into vulnerable form fields and execute it within the context of the victim’s browser. Exploitation of this issue requires user interaction in order to be successful.
| CPE | Name | Operator | Version |
|---|---|---|---|
| adobe_consulting_services_commons | le | 4.9.2 |
Related
cve
cve
CVE-2021-21043
2021-02-02 23:15:12
veracode
veracode
Cross-Site Scripting (XSS)
2021-02-03 06:55:49
gitlab
gitlab
nvd
nvd
CVE-2021-21043
2021-02-02 23:15:12
cvelist
cvelist
github
github
Reflected Cross-site Scripting (XSS) in ACS Commons
2021-05-13 22:31:14
osv
osv
CVE-2021-21043
2021-02-02 23:15:12
Reflected Cross-site Scripting in ACS Commons
2021-02-02 15:46:52
Reflected Cross-site Scripting (XSS) in ACS Commons
2021-05-13 22:31:14
adobe
adobe
APSB21-22 Security updates available for Adobe InDesign
2021-05-11 00:00:00
APSB21-73 Security update available for Adobe InDesign
2021-09-14 00:00:00
nessus
nessus
Adobe InDesign < 16.2.1 Multiple Vulnerabilities (APSB21-22)
2021-05-14 00:00:00
qualysblog
qualysblog