medium5.4
CVE-2021-42335
Easytest bulletin board management function of online learning platform does not filter special characters.
Impact
Easytest bulletin board management function of online learning platform does not filter special characters. After obtaining a user’s privilege, remote attackers can inject JavaScript and execute stored XSS attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huaju | Easytest Online Learning Test Platform | Version 1705 |