CVE-2021-43960 Cross-site scripting in n/a
A malicious administrator can inject XSS payloads into the Wizard editor, triggering code execution when users access the booking area.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2021-43960?
CVE-2021-43960 is a medium-severity cross-site scripting vulnerability in n/a, published on 12 Jan 2022. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.
Official description
Lorensbergs Connect2 3.13.7647.20190 is affected by an XSS vulnerability. Exploitation requires administrator privileges and is performed through the Wizard editor of the application. The attack requires an administrator to go into the Wizard editor and enter an XSS payload within the Page title, Page Instructions, Text before, Text after, or Text on side box. Once this has been done, the administrator must click save and finally wait until any user of the application performs a booking for rental items in the booking area of the application, where the XSS triggers. NOTE: another perspective is that the administrator may require JavaScript to customize any aspect of the page rendering. There is no effective way for the product to defend users in the face of a malicious administrator
Weakness: CWE-79
Which versions are affected by CVE-2021-43960?
It affects 1 product.
Products include Lorensbergs Connect2.
How do I fix CVE-2021-43960?
No fix has been published for CVE-2021-43960 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2021-43960 being exploited?
There is no known exploitation of CVE-2021-43960 in the wild and no public exploit code.
Sources
Also known as GHSA-h6vv-w7pc-rvq9.