CVE-2021-27888: XSS
First published: Tue Mar 02 2021(Updated: )
ZendTo before 6.06-4 Beta allows XSS during the display of a drop-off in which a filename has unexpected characters.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zend Zendto | <=6.05-4 | |
| Zend Zendto | =6.06-1-beta | |
| Zend Zendto | =6.06-2-beta | |
| Zend Zendto | =6.06-3-beta |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-27888.
What is the severity of CVE-2021-27888?
The severity of CVE-2021-27888 is medium.
What is the affected software version for CVE-2021-27888?
The affected software versions for CVE-2021-27888 are ZendTo 6.05-4 beta, ZendTo 6.06-1 beta, ZendTo 6.06-2 beta, and ZendTo 6.06-3 beta.
What is the vulnerability description of CVE-2021-27888?
CVE-2021-27888 is a vulnerability in ZendTo before 6.06-4 Beta that allows cross-site scripting (XSS) during the display of a drop-off when a filename has unexpected characters.
How can I fix CVE-2021-27888?
To fix CVE-2021-27888, it is recommended to upgrade to ZendTo version 6.06-4 Beta or later.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/zend
- canonical/zend zendto
- version/zend zendto/6.05-4
- version/zend zendto/6.06-1-beta
- version/zend zendto/6.06-2-beta
- version/zend zendto/6.06-3-beta