What is CVE-2021-41918?

CVE-2021-41918 is a medium-severity vulnerability in Webtareas Project, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2021-10-08.

How severe is CVE-2021-41918?

Medium severity. CVSS v3 base score is 5.4 out of 10.

XSS in Webtareas Project

CVE-2021-41918

webTareas version 2.4 and earlier allows an authenticated user to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and achieve a Reflected Cross-Site Scripting attack against the platform users and administrators. The issue affects every endpoint on the application because it is related on how each URL is echoed back on every response page.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.005 (42.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N.

Affected products

Webtareas_project Webtareas
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-41918?: CVE-2021-41918 is a medium-severity vulnerability in Webtareas Project, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2021-10-08.
How severe is CVE-2021-41918?: Medium severity. CVSS v3 base score is 5.4 out of 10.