CVE-2021-42664: XSS

Published Nov 5, 2021

Updated

A Stored Cross Site Scripting (XSS) Vulneraibiilty exists in Sourcecodester Engineers Online Portal in PHP via the (1) Quiz title and (2) quiz description parameters to addquiz.php. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to cookie stealing and more.

Affected Software

1 affected component

Engineers Online Portal Project Engineers Online Portal=1.0

Event History

Nov 5, 2021

CVE Published

via MITRE·12:19 PM

Data Sourced

via MITRE·12:19 PM

Description

Data Sourced

via NVD·01:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2021-42664?

CVE-2021-42664 is a Stored Cross Site Scripting (XSS) vulnerability in the Sourcecodester Engineers Online Portal.

How does CVE-2021-42664 impact the Sourcecodester Engineers Online Portal?

CVE-2021-42664 allows an attacker to run malicious JavaScript commands on the web server using the Quiz title and quiz description parameters in the add_quiz.php endpoint.

What is the severity of CVE-2021-42664?

CVE-2021-42664 has a severity score of 5.4, which is considered medium.

What software is affected by CVE-2021-42664?

The affected software is the Engineers Online Portal Project Engineers Online Portal version 1.0.

How can I fix CVE-2021-42664?

To fix CVE-2021-42664, it is recommended to update the Sourcecodester Engineers Online Portal to a patched version provided by the vendor.