Unscored CVE-2021-40092 EUVD-2021-27281GHSA-v8wc-9v93-v894

A cross-site scripting (XSS) vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web s…

Published Dec 7, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

A cross-site scripting (XSS) vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file.

References

https://support.squaredup.com
https://support.squaredup.com/hc/en-us/articles/4410635417233-CVE-2021-40092-Stored-cross-site-scripting-Image-tile-