← Back to CVE List

CVE-2021-42329

Published: 2021-10-15T12:15Z
Last Modified: 2024-11-21T06:27Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The “List_Add” function of message board of ShinHer StudyOnline System does not filter special characters in the title parameter. After logging in with user’s privilege, remote attackers can inject JavaScript and execute stored XSS attacks. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt