CVE-2021-29313: XSS
Published Aug 17, 2021
·Updated
Cross Site Scripting (XSS) vulnerability exists in SeaCMS 12.6 via the (1) vcompany and (2) vtvs parameters in /adminvideo.php,
Affected Software
1 affected component
SEACMS SEACMS=12.6
Event History
Aug 17, 2021
CVE Published
via MITRE·06:11 PM
Data Sourced
via MITRE·06:11 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-29313?
The severity of CVE-2021-29313 is medium.
2
How does the Cross Site Scripting (XSS) vulnerability in SeaCMS 12.6 occur?
The Cross Site Scripting (XSS) vulnerability in SeaCMS 12.6 occurs via the v_company and v_tvs parameters in /admin_video.php.
3
How can I fix the Cross Site Scripting (XSS) vulnerability in SeaCMS 12.6?
To fix the Cross Site Scripting (XSS) vulnerability in SeaCMS 12.6, you should apply the latest patch or update provided by the SeaCMS developers.
4
Is there any additional information about CVE-2021-29313?
Yes, you can find additional information about CVE-2021-29313 at the following reference: https://github.com/ciweiin/seacms/issues/14
5
What is the CWE (Common Weakness Enumeration) for CVE-2021-29313?
The CWE for CVE-2021-29313 is CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).