medium5.4
CVE-2021-30211
Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS).
Impact
Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS). An attacker can inject arbitrary web script in '/knowage/restful-services/signup/update' via the 'surname' parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eng | Knowage | Version 7.3.0 |