Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2021-47920

WebMO Job Manager 20.0 Cross-Site Scripting via Search Parameters

Description

WebMO Job Manager 20.0 contains a cross-site scripting vulnerability in search parameters that allows remote attackers to inject malicious script code. Attackers can exploit the filterSearch and filterSearchType parameters to perform non-persistent attacks including session hijacking and external redirects.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WebMO, LLC WebMO Job Manager

Default version status: unaffected

  • 20.0affected

References