CVE-2021-44118: XSS
SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability. To exploit the vulnerability, a visitor must browse to a malicious SVG file. The vulnerability allows an authenticated attacker to inject malicious code running on the client side into web pages visited by other users (stored XSS).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-44118?
CVE-2021-44118 refers to a Cross Site Scripting (XSS) vulnerability in SPIP 4.0.0.
How does CVE-2021-44118 affect SPIP 4.0.0?
CVE-2021-44118 allows an authenticated attacker to inject malicious code running on the client side into web pages visited by other users (stored XSS).
What is the severity of CVE-2021-44118?
CVE-2021-44118 has a severity rating of 5.4, which is considered medium.
How can an attacker exploit CVE-2021-44118?
An attacker can exploit CVE-2021-44118 by tricking a visitor into browsing to a malicious SVG file.
Is there a fix for CVE-2021-44118?
Yes, there are fixes available. You can refer to the provided references for more information.