Medium · 4.8 CVE-2021-35238 EUVD-2021-21881GHSA-p94g-5v88-v8wc

Stored XSS through URL POST parameter in CreateExternalWebsite Vulnerability

Published Sep 1, 2021 · Updated Aug 4, 2024 · Assigned by SolarWinds

Description

User with Orion Platform Admin Rights could store XSS through URL POST parameter in CreateExternalWebsite website.

Vendor	Product	Affected	Fixed
SolarWinds	Orion Platform	2020.2.6 and previous versions – < 2020.2.6 HF1	2020.2.6 HF1