CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. It affects Java.
CVE
CVE-2021-33851
Severity
MEDIUM
CVSS
5.4
EPSS
1.32%
Java
Original NVD Description
A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an application as the vehicle for the attack. The XSS payload given in the "Custom logo link" executes whenever the user opens the Settings Page of the "Customize Login Image" Plugin.
Related CVEs
Other vulnerabilities affecting the same vendor(s)