← Database

CVE-2021-42085

MEDIUM CVSS: 5.4 Published: 2021-10-07 Modified: 2026-06-17

Description

An issue was discovered in Zammad before 4.1.1. There is stored XSS via a custom Avatar.

Affected Platforms

Zammad Zammad

Weakness Type

CWE-79

References