VULNERABILITY INTELLIGENCE

CVE-2021-30083

CVSS score6.1 MEDIUM

EPSS probability0.84%

CISA KEVNot currently listed

Published2021-05-24

Last modified2026-06-17

Description

An issue was discovered in Mediat 1.4.1. There is a Reflected XSS vulnerability which allows remote attackers to inject arbitrary web script or HTML without authentication via the 'return' parameter in login.php.