Medium (6.1) in progress whatsup gold. EPSS 5.9% chance of exploitation in the next 30 days.
In Progress WhatsUp Gold prior to version 21.1.0, an application endpoint failed to adequately sanitize malicious input. which could allow an unauthenticated attacker to execute arbitrary code in a victim's browser.
Severity
CVSS 3.1
6.1 medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
5.9% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)