Skip to content
OpenAdvisories
Unscored CVE-2021-40921 EUVD-2021-28076GHSA-v332-vc75-h5m8

Cross-site scripting (XSS) vulnerability in _contactform.inc.php in Detector 0.8.5 and below version allows remote attackers to inject arbi…

Published Oct 1, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in _contactform.inc.php in Detector 0.8.5 and below version allows remote attackers to inject arbitrary web script or HTML via the cid parameter.

References