medium5.4
CVE-2021-42943
Stored cross-site scripting (XSS) in admin/usermanager.php over IPPlan v4.92b allows remote attackers to inject arbitrary web script or HTML via the userid par…
Impact
Stored cross-site scripting (XSS) in admin/usermanager.php over IPPlan v4.92b allows remote attackers to inject arbitrary web script or HTML via the userid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ipplan Project | Ipplan | Version 4.92b |