CVE-2021-38751

Published August 16th, 2021

View on NVD ↗

CVSS v3

4.3

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

A HTTP Host header attack exists in ExponentCMS 2.6 and below in /exponent_constants.php. A modified HTTP header can change links on the webpage to an arbitrary value, leading to a possible attack vector for MITM.

exponentcms/exponent-cms

Content Management, Simple.

GitHub