PT-2022-11718 · Unknown · Pixelimity

Published 2022-03-31 · Updated 2022-04-07 · CVE-2021-42866

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Pixelimity version 1.0

Description A Cross Site Scripting issue exists in the software via the Site Description field in the "pixelimity/admin/setting.php" endpoint.

Recommendations For Pixelimity version 1.0, consider disabling the Site Description field in the "pixelimity/admin/setting.php" endpoint until a patch is available. Restrict access to this endpoint to minimize the risk of exploitation. Avoid using the Site Description field in this endpoint until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-42866

Affected Products

Pixelimity

References · 5

• 🔥 http://rlsec.xyz/vulns/CVE_2021_42866.html · Exploit
• https://osv.dev/vulnerability/CVE-2021-42866 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-42866 · Security Note
• https://t.me/cvenotify/28601 · Telegram Post
• https://t.me/cibsecurity/39932 · Telegram Post