Unscored CVE-2021-20724 EUVD-2021-8138GHSA-p426-3xmr-fwmf

Reflected cross-site scripting vulnerability in the admin page of [Telop01] free edition ver1.0.1 and earlier allows a remote attacker to i…

Published May 24, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: PHP Factory Product: [Telop01] free edition

Description

Reflected cross-site scripting vulnerability in the admin page of [Telop01] free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
PHP Factory	[Telop01] free edition	ver1.0.1 and earlier	—

References

https://www.php-factory.net/telop/01.php
https://jvn.jp/en/jp/JVN53910556/index.html