CVE-2021-44608: XSS
Published Feb 23, 2022
·Updated
Multiple Cross Site Scripting (XSS) vulnerabilities exists in bloofoxCMS 0.5.2.1 - 0.5.1 via the (1) file parameter and (2) type parameter in an edit action in index.php.
Affected Software
1 affected component
bloofox bloofoxCMS>=0.5.1<=0.5.2.1
Event History
Feb 23, 2022
CVE Published
via MITRE·06:51 PM
Data Sourced
via MITRE·06:51 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-44608.
2
What is the severity level of CVE-2021-44608?
The severity level of CVE-2021-44608 is medium (5.4).
3
What software versions are affected by CVE-2021-44608?
bloofoxCMS versions 0.5.2.1 to 0.5.1 are affected by CVE-2021-44608.
4
What is the CWE ID for this vulnerability?
The CWE ID for this vulnerability is CWE-79.
5
Is there a fix available for CVE-2021-44608?
There is currently no fix available for CVE-2021-44608. It is recommended to upgrade to a newer version of bloofoxCMS when a fix becomes available.