Vulnerability Details CVE-2021-38695
SoftVibe SARABAN for INFOMA 1.1 is vulnerable to stored cross-site scripting (XSS) that allows users to store scripts in certain fields (e.g. subject, description) of the document form.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 52.1%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 3.5
References
- http://www.infoma.net/index.php/saraban/
- https://orangeo.tech/post/2021/12/24/First-CVEs.html
- https://play.google.com/store/apps/details?id=th.co.softvibe.saraban&hl=en&gl=US
- https://sawatdee.github.io/post/2021/12/24/First-CVEs.html
- http://www.infoma.net/index.php/saraban/
- https://orangeo.tech/post/2021/12/24/First-CVEs.html
- https://play.google.com/store/apps/details?id=th.co.softvibe.saraban&hl=en&gl=US
- https://sawatdee.github.io/post/2021/12/24/First-CVEs.html