medium6.1
CVE-2021-26702
EPrints 3.4.2 exposes a reflected XSS opportunity in the dataset parameter to the cgi/dataset_dictionary URI.
Impact
EPrints 3.4.2 exposes a reflected XSS opportunity in the dataset parameter to the cgi/dataset_dictionary URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eprints | Eprints | Version 3.4.2 |