← CVE Intelligence

CVE-2021-42838

Grand Vice info Co. webopac7 - Reflected XSS PUBLISHED

Description (CNA)

Grand Vice info Co. webopac7 book search field parameter does not properly restrict the input of special characters, thus unauthenticated attackers can inject JavaScript syntax remotely, and further perform reflective XSS attacks.

Affected (CNA)

Vendor / productVersions
Grand Vice info Co. / webopac7affected 7.1.20160701; affected 1.8.20160701

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.