CVE-2021-22936

Publication date

2021-08-16 18:38:52

Family

hackerone

State

PUBLISHED

Description

A vulnerability in Pulse Connect Secure before 9.1R12 could allow a threat actor to perform a cross-site script attack against an authenticated administrator via an unsanitized web parameter.