CVE

CVE-2021-40969

CVE-2021-40969

Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the firstname parameter.

Source: CVE-2021-40969

Exit mobile version