VULNERABILITY INTELLIGENCE

CVE-2021-42970

CVSS score6.1 MEDIUM

EPSS probability0.72%

CISA KEVNot currently listed

Published2022-03-29

Last modified2026-06-17

Description

Cross Site Scripting (XSS) vulnerability exists in cxuucms v3 via the imgurl of /feedback/post/ content parameter.