CVE-2021-4302: slackero phpwcms SVG File cross site scripting
A vulnerability was found in slackero phpwcms up to 1.9.26. It has been classified as problematic. This affects an unknown part of the component SVG File Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.9.27 is able to address this issue. The patch is named b39db9c7ad3800f319195ff0e26a0981395b1c54. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217419.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-4302?
CVE-2021-4302 is a vulnerability found in slackero phpwcms up to version 1.9.26 which allows for cross-site scripting attacks.
How does CVE-2021-4302 affect slackero phpwcms?
CVE-2021-4302 affects an unknown part of the component SVG File Handler in slackero phpwcms up to version 1.9.26 and allows for cross-site scripting attacks.
Is CVE-2021-4302 classified as a problematic vulnerability?
Yes, CVE-2021-4302 is classified as a problematic vulnerability.
How severe is CVE-2021-4302?
CVE-2021-4302 has a severity score of 6.1/10, which is considered medium severity.
How can I fix CVE-2021-4302 in slackero phpwcms?
Upgrading to version 1.9.27 of slackero phpwcms will fix the CVE-2021-4302 vulnerability.