CVE-2021-41951

描述

ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability in plugins/wordpress_sso/pages/index.php via the wordpress_user parameter. If an attacker is able to persuade a victim to visit a crafted URL, malicious JavaScript content may be executed within the context of the victim's browser.

如何修補 CVE-2021-41951

要修補 CVE-2021-41951,請將受影響套件升級到下列已修補版本。

• Bitnami/resourcespace—升級至 9.6.0 或更新版本

CVE-2021-41951 正在被利用嗎?

可能 — EPSS 為 77.9%,屬於高被利用機率區間,建議優先修補。

受影響套件(1)

• from 0, < 9.6.0 | >= 9.6.0, <= 9.6.0

CVSS 分數

參考連結(1)

• WEBwww.horizon3.ai/multiple-vulnerabilities-in-resourcespace/