CVE-2021-42329
ShinHer Information Co., LTD. ShinHer StudyOnline System - Stored XSS
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.4EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
15 Oct 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The “List_Add” function of message board of ShinHer StudyOnline System does not filter special characters in the title parameter. After logging in with user’s privilege, remote attackers can inject JavaScript and execute stored XSS attacks.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Affected products
ShinHer Information Co., LTD. · ShinHer StudyOnline SystemWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →