medium5.4
CVE-2021-3395
A cross-site scripting (XSS) vulnerability in Pryaniki 6.44.3 allows remote authenticated users to upload an arbitrary file.
Impact
A cross-site scripting (XSS) vulnerability in Pryaniki 6.44.3 allows remote authenticated users to upload an arbitrary file. The JavaScript code will execute when someone visits the attachment.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pryaniki | Pryaniki | Version 6.44.3 |