Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2021-42329

ShinHer Information Co., LTD. ShinHer StudyOnline System - Stored XSS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

The “List_Add” function of message board of ShinHer StudyOnline System does not filter special characters in the title parameter. After logging in with user’s privilege, remote attackers can inject JavaScript and execute stored XSS attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ShinHer Information Co., LTD. ShinHer StudyOnline System

  • unspecified to ≤ 2021affected

References