VULNERABILITY INTELLIGENCE

CVE-2021-28000

CVSS score4.8 MEDIUM
EPSS probability0.93%
CISA KEVNot currently listed
Published2021-08-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Description

A persistent cross-site scripting vulnerability was discovered in Local Services Search Engine Management System Project 1.0 which allows remote attackers to execute arbitrary code via crafted payloads entered into the Name and Address fields.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references