medium4.8Public exploit code
CVE-2021-27308
A cross-site scripting (XSS) vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to inject JavaScript via the "redirect" para…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- 4Images 1.8 - 'redirect' Reflected XSS2021-06-03 · webapps · php
Impact
A cross-site scripting (XSS) vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to inject JavaScript via the "redirect" parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 4homepages | 4images | Version 1.8 |