CVE-2021-3026: XSS
Published Jan 5, 2021
·Updated
Invision Community IPS Community Suite before 4.5.4.2 allows XSS during the quoting of a post or comment.
Affected Software
1 affected component
Invisioncommunity Ips Community Suite<4.5.4.2
Event History
Jan 5, 2021
CVE Published
via MITRE·10:58 PM
Data Sourced
via MITRE·10:58 PM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2021-3026.
2
What is the severity of CVE-2021-3026?
The severity of CVE-2021-3026 is medium.
3
What software is affected by CVE-2021-3026?
Invision Community IPS Community Suite before version 4.5.4.2 is affected by CVE-2021-3026.
4
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The CWE ID for CVE-2021-3026 is CWE-79.
5
How can I fix CVE-2021-3026?
To fix CVE-2021-3026, update Invision Community IPS Community Suite to version 4.5.4.2 or later.