medium5.4
CVE-2021-3938
snipe-it is vulnerable to Cross-site Scripting
Impact
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | snipe/snipe-it | <= 5.3.1 | 5.4.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Snipeitapp | Snipe-It | through 5.3.1 |