1. Home
  2. CVE Database
  3. CVE-2021-41918
MEDIUM · 5.4

CVE-2021-41918

webTareas version 2.4 and earlier allows an authenticated user to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and achieve a Reflected Cross-Site Scripting a...

Vulnerability Description

webTareas version 2.4 and earlier allows an authenticated user to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and achieve a Reflected Cross-Site Scripting attack against the platform users and administrators. The issue affects every endpoint on the application because it is related on how each URL is echoed back on every response page.

CVSS Score

5.4

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
Webtareas ProjectWebtareas<= 2.4

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2021-41918?

CVE-2021-41918 is a vulnerability with a CVSS score of 5.4 (MEDIUM). webTareas version 2.4 and earlier allows an authenticated user to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and achieve a Reflected Cross-Site Scripting a...

How severe is CVE-2021-41918?

CVE-2021-41918 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-41918?

Check the references section above for vendor advisories and patch information. Affected products include: Webtareas Project Webtareas.