VULNERABILITY INTELLIGENCE

CVE-2021-44310

CVSS score4.8 MEDIUM
EPSS probability0.57%
CISA KEVNot currently listed
Published2022-03-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Description

An issue was discovered in Firmware Analysis and Comparison Tool v3.2. With administrator privileges, the attacker could perform stored XSS attacks by inserting JavaScript and HTML code in user creation functionality.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references