CVE-2021-3920: Cross-site Scripting (XSS) - Stored in getgrav/grav-plugin-admin
Published Nov 19, 2021
·Updated
grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected Software
1 affected component
getgrav grav-plugin-admin<1.10.25
Remediation
Event History
Nov 19, 2021
CVE Published
via MITRE·12:15 PM
Data Sourced
via MITRE·12:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-3920?
CVE-2021-3920 is a vulnerability in grav-plugin-admin that allows for 'Cross-site Scripting' attacks.
2
What is the severity of CVE-2021-3920?
CVE-2021-3920 has a severity rating of 5.4 (medium).
3
How does CVE-2021-3920 impact grav-plugin-admin?
CVE-2021-3920 allows malicious actors to execute 'Cross-site Scripting' attacks on grav-plugin-admin.
4
Is there a fix available for CVE-2021-3920?
Yes, a fix for CVE-2021-3920 is available in the latest version of grav-plugin-admin.
5
Where can I find more information about CVE-2021-3920?
You can find more information about CVE-2021-3920 on the GitHub commit and the Huntr.dev bounty page.