CVE-2021-42943 | BDVDB-2026-176296 Detail

Description#

Stored cross-site scripting (XSS) in admin/usermanager.php over IPPlan v4.92b allows remote attackers to inject arbitrary web script or HTML via the userid parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://devbrain.com.br/index.php/2022/05/16/cve-2021-42943/

Exploit#

No public exploit known

History#

Version 12022-05-17Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.