Multiple cross-site scripting (XSS) vulnerabilities exist in SITA Software Azur CMS 1.2.3.1 and earlier, which allows remote attackers to inject arbitrary web script or HTML via the (1) NOM_CLI , (2) ADRESSE , (3) ADRESSE2, (4) LOCALITE parameters to /eshop/products/json/aouCustomerAdresse; and the (5) nom_liste parameter to /eshop/products/json/addCustomerFavorite.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2021-09-15T17:50:05

Updated: 2024-08-03T21:55:11.829Z

Reserved: 2021-03-19T00:00:00

Link: CVE-2021-28901

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-09-15T18:15:08.933

Modified: 2024-11-21T06:00:22.137

Link: CVE-2021-28901

cve-icon Redhat

No data.