Cross-site Scripting (XSS) - Reflected in icecoder/icecoder
CVE-2021-3862

5.4MEDIUM

Key Information:

Vendor: Icecoder
Status: Icecoder/icecoder
Vendor: CVE Published:; 17 January 2022

🔔 Create Icecoder Vulnerability Alert

What is CVE-2021-3862?

icecoder is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected Version(s)

icecoder/icecoder < 8.1

References

https://huntr.dev/bounties/5c9c228e-2a39-4643-bb82-2b02a2...

x_refsource_CONFIRM

https://github.com/icecoder/icecoder/commit/51cf24b2a3913...

x_refsource_MISC

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

CVSS V3.0