CVE-2021-40492

6.1 mediumEPSS 2.3%

Medium (6.1) in gibbonedu gibbon. EPSS 2.3% chance of exploitation in the next 30 days.

A reflected XSS vulnerability exists in multiple pages in version 22 of the Gibbon application that allows for arbitrary execution of JavaScript (gibbonCourseClassID, gibbonPersonID, subpage, currentDate, or allStudents to index.php).

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-09-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gibbonedu:gibbon

References

https://gibbonedu.org/
https://github.com/5qu1n7/CVE-2021-40492
https://gibbonedu.org/
https://github.com/5qu1n7/CVE-2021-40492

Check your stack JSON