← Database

CVE-2021-43686

MEDIUM CVSS: 6.1 Published: 2021-12-02 Modified: 2026-06-17

Description

nZEDb v0.4.20 is affected by a Cross Site Scripting (XSS) vulnerability in www/pages/api.php. The exit function will terminate the script and print the message which has the input $_GET['t'].

Affected Platforms

Nzedb Project Nzedb

Weakness Type

CWE-79

References