CVE-2021-40492: XSS

Published Sep 3, 2021

Updated

A reflected XSS vulnerability exists in multiple pages in version 22 of the Gibbon application that allows for arbitrary execution of JavaScript (gibbonCourseClassID, gibbonPersonID, subpage, currentDate, or allStudents to index.php).

Affected Software

1 affected component

GibbonEdu Gibbon=22.0.00

Event History

Sep 3, 2021

CVE Published

via MITRE·04:47 PM

Data Sourced

via MITRE·04:47 PM

Description

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2021-40492.

What is the severity of CVE-2021-40492?

The severity of CVE-2021-40492 is medium.

How does the reflected XSS vulnerability in Gibbon version 22 work?

The reflected XSS vulnerability in Gibbon version 22 allows for arbitrary execution of JavaScript through parameters such as gibbonCourseClassID, gibbonPersonID, subpage, currentDate, or allStudents in index.php.

Which version of Gibbon is affected by CVE-2021-40492?

Version 22.0.00 of Gibbon is affected by CVE-2021-40492.

Where can I find more information about CVE-2021-40492?

You can find more information about CVE-2021-40492 on the GibbonEdu website (https://gibbonedu.org/) and the GitHub repository (https://github.com/5qu1n7/CVE-2021-40492).