medium5.4
CVE-2021-20749
Cross-site scripting vulnerability in Fudousan plugin ver5.7.0 and earlier, Fudousan Plugin Pro Single-User Type ver5.7.0 and earlier, and Fudousan Plugin Pro …
Impact
Cross-site scripting vulnerability in Fudousan plugin ver5.7.0 and earlier, Fudousan Plugin Pro Single-User Type ver5.7.0 and earlier, and Fudousan Plugin Pro Multi-User Type ver5.7.0 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nendeb | Fudousan Plugin | through 5.7.0 |
| Nendeb | Fudousan Plugin Pro Multi-User | through 5.7.0 |
| Nendeb | Fudousan Plugin Pro Single-User | through 5.7.0 |