CVE-2021-43432: XSS
Published Apr 7, 2022
·Updated
A Cross Site Scripting (XSS) vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in product-add.jsp.
Affected Software
1 affected component
Exrick XMall<=2021-11-07
Remediation
Event History
Apr 7, 2022
CVE Published
via MITRE·06:09 PM
Data Sourced
via MITRE·06:09 PM
Description
Data Sourced
via NVD·07:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-43432?
CVE-2021-43432 is classified as a high severity Cross Site Scripting (XSS) vulnerability.
2
How do I fix CVE-2021-43432?
To fix CVE-2021-43432, update the Exrick XMall Admin Panel to a version released after November 7, 2021.
3
What software is affected by CVE-2021-43432?
CVE-2021-43432 affects Exrick XMall versions up to and including 2021-11-07.
4
What type of vulnerability is CVE-2021-43432?
CVE-2021-43432 is a Cross Site Scripting (XSS) vulnerability that can be exploited via the GET parameter in product-add.jsp.
5
Can CVE-2021-43432 lead to data exposure?
Yes, CVE-2021-43432 could potentially allow attackers to craft malicious scripts that may lead to data exposure or session hijacking.