VULNERABILITY INTELLIGENCE

CVE-2021-40492

CVSS score6.1 MEDIUM
EPSS probability2.32%
CISA KEVNot currently listed
Published2021-09-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

A reflected XSS vulnerability exists in multiple pages in version 22 of the Gibbon application that allows for arbitrary execution of JavaScript (gibbonCourseClassID, gibbonPersonID, subpage, currentDate, or allStudents to index.php).

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references