Lucene search
PRIOn knowledge basePRION:CVE-2021-45888HistoryMar 13, 2022 - 2:15 a.m.
Design/Logic Flaw
2022-03-1302:15:00
PRIOn knowledge base
www.prio-n.com
3
An issue was discovered in PONTON X/P Messenger before 3.11.2. The navigation tree that is shown on the left side of every page of the web application is vulnerable to XSS: it allows injection of JavaScript into its nodes. Creating such nodes is only possible for users who have the role Configuration Administrator or Administrator.
| CPE | Name | Operator | Version |
|---|---|---|---|
| x\\/p_messenger | eq | 3.10.0 | |
| x\\/p_messenger | eq | 3.8.0 |
Related
cve
cve
CVE-2021-45888
2022-03-13 02:15:07
cvelist
cvelist
CVE-2021-45888
2022-03-13 01:18:57
nvd
nvd
CVE-2021-45888
2022-03-13 02:15:07