Beveiligingsadvies

CVE-2021-47725

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-31 18:40:52
Laatst bijgewerkt 2026-07-28 01:47:18
Toegewezen door VulnCheck
CVSS-score 5.4
Status PUBLISHED

Beschrijving

STVS ProVision 5.9.10 contains a cross-site scripting vulnerability in the 'files' POST parameter that allows authenticated attackers to inject arbitrary HTML code. Attackers can exploit the unvalidated input to execute malicious scripts within a user's browser session in the context of the affected site.