medium6.1
CVE-2021-43673
dzzoffice 2.02.1_SC_UTF8 is affected by a Cross Site Scripting (XSS) vulnerability in explorerfile.php.
Impact
dzzoffice 2.02.1_SC_UTF8 is affected by a Cross Site Scripting (XSS) vulnerability in explorerfile.php. The output of the exit function is printed for the user via exit(json_encode($return)).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dzzoffice | Dzzoffice | Version 2.02.1 |