CVE-2021-3318

Published January 27th, 2021

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

1

PROJECT

Description

attach/ajax.php in DzzOffice through 2.02.1 allows XSS via the editorid parameter.

zyx0814/dzzoffice

dzzoffice

GitHub

4.03K