Description
A cross-site scripting (XSS) vulnerability in the "Zip content" feature in Element-IT HTTP Commander 3.1.9 allows remote authenticated users to inject arbitrary web script or HTML via filenames.
Unscored
CVE-2021-40813
EUVD-2021-27977GHSA-95v9-qprc-8w66
A cross-site scripting (XSS) vulnerability in the "Zip content" feature in Element-IT HTTP Commander 3.1.9 allows remote authenticated user…
Published Jan 13, 2022 · Updated Aug 4, 2024 · Assigned by mitre