CVE-2021-43932 — Elcomplus SmartPtt Cross-site Scripting

CVE-2021-43932

Elcomplus SmartPtt Cross-site Scripting PUBLISHED

Description (CNA)

Elcomplus SmartPTT is vulnerable when an attacker injects JavaScript code into a specific parameter that can executed upon accessing the dashboard or the main page.

Affected (CNA)

Vendor / product	Versions
Elcomplus / SmartPTT	affected 1.1

CWE

CWE-79

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-04

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-04

CISA-ADP

No English description supplied.

No references supplied.