medium6.1
CVE-2021-28290
A cross-site scripting (XSS) vulnerability in Skoruba IdentityServer4.Admin before 2.0.0 via unencoded value passed to the data-secret-value parameter.
Impact
A cross-site scripting (XSS) vulnerability in Skoruba IdentityServer4.Admin before 2.0.0 via unencoded value passed to the data-secret-value parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Identityserver4.Admin Project | Identityserver4.Admin | before 2.0.0 |