CVE-2021-42565

MEDIUM NUCLEI

Myfactory Fms < 7.1-912 - XSS

Title source: rule

Description

myfactory.FMS before 7.1-912 allows XSS via the UID parameter.

Exploits (1)

exploitdb WRITEUP
webappsmultiple
https://www.exploit-db.com/exploits/50428

Nuclei Templates (1)

myfactory FMS - Cross-Site Scripting
MEDIUMVERIFIEDby madrobot,daffainfo

Scores

CVSS v3 6.1
EPSS 0.0105
EPSS Percentile 77.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
myfactory/fms < 7.1-912
Published Oct 18, 2021
Tracked Since Feb 18, 2026