← Database

CVE-2021-45812

MEDIUM CVSS: 6.1 Published: 2021-12-28 Modified: 2026-06-17

Description

NUUO Network Video Recorder NVRsolo 3.9.1 is affected by a Cross Site Scripting (XSS) vulnerability. An attacker can steal the user's session by injecting malicious JavaScript codes which leads to session hijacking.

Affected Platforms

Nuuo NvrsoloNuuo Nvrsolo Firmware

Weakness Type

CWE-79

References