CVE-2021-3151 | BDVDB-2026-149784 Detail

Description#

i-doit before 1.16.0 is affected by Stored Cross-Site Scripting (XSS) issues that could allow remote authenticated attackers to inject arbitrary web script or HTML via C__MONITORING__CONFIG__TITLE, SM2__C__MONITORING__CONFIG__TITLE, C__MONITORING__CONFIG__PATH, SM2__C__MONITORING__CONFIG__PATH, C__MONITORING__CONFIG__ADDRESS, or SM2__C__MONITORING__CONFIG__ADDRESS.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2020-056
https://www.i-doit.org/news/
http://packetstormsecurity.com/files/162815/i-doit-1.15.2-Cross-Site-Scripting.html

Exploit#

No public exploit known

History#

Version 12021-02-27Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.