Skip to content
OpenAdvisories
Unscored CVE-2021-43698 EUVD-2021-30605GHSA-mg5m-225h-2mpp

phpWhois (last update Jun 30 2021) is affected by a Cross Site Scripting (XSS) vulnerability. In file example.php, the exit function will t…

Published Nov 29, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

phpWhois (last update Jun 30 2021) is affected by a Cross Site Scripting (XSS) vulnerability. In file example.php, the exit function will terminate the script and print the message to the user. The message will contain $_GET['query'] then there is a XSS vulnerability.

References