Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-31930
HistoryMay 19, 2021 - 3:15 p.m.

Cross site scripting

2021-05-1915:15:00
PRIOn knowledge base
www.prio-n.com
3

0.001 Low

EPSS

Percentile

39.4%

Persistent cross-site scripting (XSS) in the web interface of Concerto through 2.3.6 allows an unauthenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into the First Name or Last Name parameter upon registration. When a privileged user attempts to delete the account, the XSS payload will be executed.

CPENameOperatorVersion
concertole2.3.6

0.001 Low

EPSS

Percentile

39.4%

Related for PRION:CVE-2021-31930