Podatność CVE-2021-25295

Podatność CVE-2021-25295

Publikacja: 2021-01-18

Opis:

Typ:

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
4.3/10	2.9/10	8.6/10

Affected software
Opencats -> Opencats

https://github.com/snoopysecurity/snoopysecurity.github.io/blob/master/web-application-security/2021/01/16/09_opencats_php_object_injection.html

https://snoopysecurity.github.io/web-application-security/2021/01/16/09_opencats_php_object_injection.html

https://www.opencats.org/news/