CVE-2021-45792: XSS

Published Mar 17, 2022

Updated

Slims9 Bulian 9.4.2 is affected by Cross Site Scripting (XSS) in /admin/modules/system/customfield.php.

Affected Software

1 affected component

Library Management System=9.4.2

Event History

Mar 17, 2022

CVE Published

via MITRE·10:55 AM

Data Sourced

via MITRE·10:55 AM

Description

Frequently Asked Questions

What is CVE-2021-45792?

CVE-2021-45792 is a vulnerability in Slims9 Bulian 9.4.2 that allows for Cross Site Scripting (XSS) attacks in /admin/modules/system/custom_field.php.

How does CVE-2021-45792 impact the Slims9 Bulian 9.4.2 software?

CVE-2021-45792 can be exploited by an attacker to perform XSS attacks, which can lead to the execution of malicious scripts and the theft of sensitive information.

What is the severity of CVE-2021-45792?

CVE-2021-45792 has a severity rating of medium with a CVSS score of 4.8.

Is there a fix available for CVE-2021-45792 in Slims9 Bulian 9.4.2?

Currently, there is no official fix or patch available for CVE-2021-45792 in Slims9 Bulian 9.4.2, but implementing proper input validation and output encoding can help mitigate the risk.

Where can I find more information about CVE-2021-45792?

You can find more information about CVE-2021-45792 in the GitHub issue: https://github.com/slims/slims9_bulian/issues/122.