CVE-2021-39391

MEDIUM

Beego < 2.0.2 - Stored Cross-Site Scripting via URI Path in Request Statistics

Title source: llm
STIX 2.1

Description

Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated by administrators viewing the "Request Statistics" page.

References (2)

Core 2
Core References
Third Party Advisory x_refsource_misc
https://github.com/beego/beego
Exploit, Issue Tracking, Patch, Third Party Advisory x_refsource_misc
https://github.com/beego/beego/issues/4727

Scores

CVSS v3 6.1
EPSS 0.0080
EPSS Percentile 52.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (2)
beego/beego 2.0.1
beego/beego 0 - 2.0.2Go
Published Sep 14, 2021
Tracked Since Feb 18, 2026