CVE-2021-43673 | BDVDB-2026-165142 Detail

Description#

dzzoffice 2.02.1_SC_UTF8 is affected by a Cross Site Scripting (XSS) vulnerability in explorerfile.php. The output of the exit function is printed for the user via exit(json_encode($return)).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/zyx0814/dzzoffice/issues/188

Exploit#

No public exploit known

History#

Version 12021-12-03Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.