CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.9. It affects Java.
CVE
CVE-2021-42940
Severity
CRITICAL
CVSS
9.9
EPSS
1.08%
Java
Original NVD Description
A Cross Site Scripting (XSS) vulnerability exists in Projeqtor 9.3.1 via /projeqtor/tool/saveAttachment.php, which allows an attacker to upload a SVG file containing malicious JavaScript code.
Related CVEs
Other vulnerabilities affecting the same vendor(s)