medium5.4
CVE-2021-40292
A Stored Cross Site Sripting (XSS) vulnerability exists in DzzOffice 2.02.1 via the settingnew parameter.
Impact
A Stored Cross Site Sripting (XSS) vulnerability exists in DzzOffice 2.02.1 via the settingnew parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dzzoffice | Dzzoffice | Version 2.02.1 |