Weseek, Inc. Growi (V4.2 Series)
2 CVEs affecting Weseek, Inc. Growi (V4.2 Series). Latest disclosed: 2021-03-10. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-20672 | Medium | 6.1 | 2021-03-10 | Reflected cross-site scripting vulnerability due to insufficient verification of URL query parameters in GROWI (v4.2 Series) versions from v4.2.0 to v4.2.7 all… |
CVE-2021-20673 | Medium | 4.8 | 2021-03-10 | Stored cross-site scripting vulnerability in Admin Page of GROWI (v4.2 Series) versions from v4.2.0 to v4.2.7 allows remote authenticated attackers to inject a… |