VULNERABILITY INTELLIGENCE

CVE-2021-32542

CVSS score4.7 MEDIUM
EPSS probability0.68%
CISA KEVNot currently listed
Published2021-05-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Description

The parameters of the specific functions in the CTS Web trading system do not filter special characters, which allows unauthenticated attackers can remotely perform reflected XSS and obtain the users’ connection token that triggered the attack.

Weakness classification

  • twcert@cert.org.tw: CWE-79

Primary references