← Volver a CVEs

CVE-2021-25790

MEDIUM

5.4

Descripcion

Multiple stored cross site scripting (XSS) vulnerabilities in the "Register" module of House Rental and Property Listing 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads in all text fields except for Phone Number and Alternate Phone Number.

Detalles CVE

Puntuacion CVSS v3.15.4

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosLOW

Interaccion usuarioREQUIRED

Publicado7/23/2021

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

house_rental_and_property_listing_php_project:house_rental_and_property_listing_php

Debilidades (CWE)

CWE-79

Referencias

https://www.exploit-db.com/exploits/49352(cve@mitre.org)

https://www.sourcecodester.com(cve@mitre.org)

https://www.sourcecodester.com/php/14649/house-rental-and-property-listing-php-full-source-code.html(cve@mitre.org)

https://www.exploit-db.com/exploits/49352(af854a3a-2127-422b-91ae-364da2661108)

https://www.sourcecodester.com(af854a3a-2127-422b-91ae-364da2661108)

https://www.sourcecodester.com/php/14649/house-rental-and-property-listing-php-full-source-code.html(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.