CVE-2021-26628
High
Description
Insufficient script validation of the admin page enables XSS, which causes unauthorized users to steal admin privileges. When uploading file in a specific menu, the verification of the files is insufficient. It allows remote attackers to upload arbitrary files disguising them as image files.
SeverityHigh
CVSS8.1
Exploit probability—
ProductMaxboard
PublishedApr 26, 2022
First seenApr 26, 2022
How to fix
Update
- maxb maxboard1.9.6.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| maxb maxboard | v < 1.9.6.1 | 1.9.6.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.