CVE-2021-36720
Assigner: INCD
Published: 2021-12-08T19:24:46
State: PUBLISHED
affected: product: PineApp - Mail Secure
vendor: Cybonet
versions: status: affected
version: PineApp - Mail Secure Latest
descriptions: value: PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url=<script>alert(1)</script> and stealing cookies .
problemTypes: descriptions: description: Reflected XSS
type: text
solutions: value: Update to version 5.2.1 - Code hardening by adding an extra layer of input validations
source: advisory: ILVN-2021-0005
defect: ILVN-2021-0005
discovery: EXTERNAL
title: Cybonet - PineApp
x_generator: engine: Vulnogram 0.0.9