CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It may be remotely exploitable.
CVE
CVE-2021-20672
Severity
MEDIUM
CVSS
6.1
EPSS
0.95%
Original NVD Description
Reflected cross-site scripting vulnerability due to insufficient verification of URL query parameters in GROWI (v4.2 Series) versions from v4.2.0 to v4.2.7 allows remote attackers to inject an arbitrary script via unspecified vectors.
Related CVEs
Other vulnerabilities affecting the same vendor(s)