The bulletin function of Flygo does... CVE-2021-37211

3.5 AV AC AU C I A
发布: 2021-08-09
修订: 2024-11-21

The bulletin function of Flygo does not filter special characters while a new announcement is added. Remoter attackers can use the vulnerability with general user’s credential to inject JavaScript and execute stored XSS attacks.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息