CVE-2021-43432

MediumCVSS 6.1

Published: 07/04/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.80%

52th percentile - higher than 52% of all known CVEs

Summary

A Cross Site Scripting (XSS) vulnerability exists in the Exrick XMall Admin Panel in product-add.jsp. An attacker can inject a malicious script via the GET parameter, leading to JavaScript execution in the victim's browser.

Risk Assessment

The risk includes potential session hijacking of an administrator, takeover of the admin panel, or unauthorized actions performed in the context of the victim's session.

Recommendation

Immediately update the XMall admin panel to the latest version and implement input validation and encoding for the GET parameter in product-add.jsp.

Original NVD description (English source)

A Cross Site Scripting (XSS) vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in product-add.jsp.