CVE-2021-35303

n/a / n/a PUBLISHED

Description (CNA)

Cross Site Scripting (XSS) in Zammad 1.0.x up to 4.0.0 allows remote attackers to execute arbitrary web script or HTML via the User Avatar attribute.

Vendor / product	Versions
n/a / n/a	affected n/a

No CWE identifiers supplied.

CVE

No English description supplied.