CVE-2021-4035 — Wocu Monitoring stored Cross-Site Scripting (XSS)
A stored cross site scripting have been identified at the comments in the report creation due to an obsolote version of tinymce editor. In order to exploit this vulnerability, t…
Published: 2022-02-11 · CVSS: 3.5 · CVSS 3.1
A stored cross site scripting have been identified at the comments in the report creation due to an obsolote version of tinymce editor. In order to exploit this vulnerability, the attackers needs an account with enough privileges to view and edit reports.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7