medium5.4
CVE-2021-33966
Cross site scripting (XSS) vulnerability in spotweb 1.4.9, allows authenticated attackers to execute arbitrary code via crafted GET request to the login page.
Impact
Cross site scripting (XSS) vulnerability in spotweb 1.4.9, allows authenticated attackers to execute arbitrary code via crafted GET request to the login page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Spotweb Project | Spotweb | Version 1.4.9 |