Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-4302

A vulnerability was found in slackero phpwcms up to 1.9.26. It has been classified as problematic. This affects an unknown part of the component SVG File Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.9.27 is able to address this issue. The patch is named b39db9c7ad3800f319195ff0e26a0981395b1c54. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217419.

Published

2023-01-04T22:15:09.000

Last Modified

2024-11-21T06:37:21.747

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 3.5 (LOW)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Access Vector: NETWORK
Access Complexity: LOW
Authentication: SINGLE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

8.0

Impact Score

2.9

Weaknesses

Type: Secondary
CWE-79

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	phpwcms	phpwcms	< 1.9.27	Yes

References

https://github.com/slackero/phpwcms/commit/b39db9c7ad3800f319195ff0e26a0981395b1c54 Patch ([email protected])
https://github.com/slackero/phpwcms/releases/tag/v1.9.27 Release Notes ([email protected])
https://vuldb.com/?ctiid.217419 Permissions Required, Third Party Advisory ([email protected])
https://vuldb.com/?id.217419 Permissions Required, Third Party Advisory ([email protected])
https://github.com/slackero/phpwcms/commit/b39db9c7ad3800f319195ff0e26a0981395b1c54 Patch (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/slackero/phpwcms/releases/tag/v1.9.27 Release Notes (af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?ctiid.217419 Permissions Required, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?id.217419 Permissions Required, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)