VULNERABILITY INTELLIGENCE

CVE-2021-42943

CVSS score5.4 MEDIUM

EPSS probability0.75%

CISA KEVNot currently listed

Published2022-05-17

Last modified2026-06-17

Description

Stored cross-site scripting (XSS) in admin/usermanager.php over IPPlan v4.92b allows remote attackers to inject arbitrary web script or HTML via the userid parameter.