CVE-2021-25959

Published: 2021-09-29T14:15Z

Last Modified: 2024-11-21T05:55Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting (XSS), due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt