Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2021-42551

Reflected XSS in NetBiblio WebOPAC search functionality

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NCSC.ch

Description

Cross-site Scripting (XSS) vulnerability in the search functionality of AlCoda NetBiblio WebOPAC allows an unauthenticated user to craft a reflected Cross-Site Scripting attack. This issue affects: AlCoda NetBiblio WebOPAC versions prior to 4.0.0.320; versions later than 4.0.0.328. This issue does not affect: AlCoda NetBiblio WebOPAC version 4.0.0.335 and later versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AlCoda NetBiblio WebOPAC

  • unspecified to < 4.0.0.320affected
  • next of 4.0.0.328 to < unspecifiedaffected
  • 4.0.0.335 to < unspecifiedunaffected

References