admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-11-28 18:48:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2021/CVE-2021-25982.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

823 B
Raw Blame History

CVE-2021-25982

Description

In Factor (App Framework & Headless CMS) forum plugin, versions 1.3.5 to 1.8.30, are vulnerable to reflected Cross-Site Scripting (XSS) at the “search” parameter in the URL. An unauthenticated attacker can execute malicious JavaScript code and steal the session cookies.

POC

Reference

Github

No PoCs found on GitHub currently.