CVE-2021-33849
CVE-2021-33849
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
05 Oct 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A Cross-Site Scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user’s browser while the browser is connected to a trusted website. The attack targets your application's users and not the application itself while using your application as the attack's vehicle. The XSS payload executes whenever the user changes the form values or deletes a created form in Zoho CRM Lead Magnet Version 1.7.2.4.
Affected products
Zoho · Zoho CRM Lead MagnetWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →