VULNERABILITY INTELLIGENCE

CVE-2021-30174

CVSS score5.4 MEDIUM
EPSS probability0.59%
CISA KEVNot currently listed
Published2021-05-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

RiyaLab CloudISO event item is added, special characters in specific field of time management page are not properly filtered, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks.

Weakness classification

  • twcert@cert.org.tw: CWE-79

Primary references