CVE Catalog

CVE-2021-42639

MediumCVSS 6.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.14%

63th percentile - higher than 63% of all known CVEs

Summary

Reflected XSS vulnerability in PrinterLogic Web Stack versions 19.1.1.13 SP9 and below. Attacker-controlled input is reflected back in the page without sanitization.

Risk Assessment

Risk of session theft, redirection to malicious sites, or unauthorized actions performed in the context of the victim's session.

Recommendation

Immediately upgrade PrinterLogic Web Stack to a version newer than 19.1.1.13 SP9 and implement input sanitization mechanisms.

Original NVD description (English source)

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to multiple reflected cross site scripting vulnerabilities. Attacker controlled input is reflected back in the page without sanitization.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS