CVE-2021-42565
MEDIUM NUCLEIMyfactory Fms < 7.1-912 - XSS
Title source: ruleDescription
myfactory.FMS before 7.1-912 allows XSS via the UID parameter.
Exploits (1)
Nuclei Templates (1)
myfactory FMS - Cross-Site Scripting
MEDIUMVERIFIEDby madrobot,daffainfo
Scores
CVSS v3
6.1
EPSS
0.0105
EPSS Percentile
77.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (1)
myfactory/fms
< 7.1-912
Published
Oct 18, 2021
Tracked Since
Feb 18, 2026