CVE-2021-47716 - Orangescrum 1.8.0 Cross-Site Scripting via Authenticated Endpoints

CVE ID : CVE-2021-47716 Published : Dec. 23, 2025, 8:15 p.m. | 32 minutes ago Description : Orangescrum 1.8.0 contains multiple cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts through various input parameters. Attackers can exploit parameters like 'projid', 'CS_message', and 'name' to execute arbitrary JavaScript code in victim's browsers by submitting crafted payloads through application endpoints. Severity: 5.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor