CVE-2021-38710

Published: 2021-08-18T15:15Z

Last Modified: 2024-11-21T06:17Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Static (Persistent) XSS Vulnerability exists in version 4.3.0 of Yclas when using the install/view/form.php script. An attacker can store XSS in the database through the vulnerable SITE_NAME parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt