CVE-2021-46030

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-46030
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-46030.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-46030
Published
2022-01-19T15:15:07.753Z
Modified
2026-03-14T08:43:08.789250Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

There is a Cross Site Scripting attack (XSS) vulnerability in JavaQuarkBBS <= v2. By entering specific statements into the background tag management module, the attack statement will be stored in the database, and the next victim will be attacked when he accesses the tag module.

References

Affected packages

Git / github.com/ChinaLHR/JavaQuarkBBS

Affected ranges

Type
GIT
Repo
https://github.com/ChinaLHR/JavaQuarkBBS
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2898b8829190f410a7ad7bb18d75b92c7c1ab221
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2"
        }
    ]
}

Affected versions

Other
v1
v2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-46030.json"