CVE-2021-46030

5.4 mediumEPSS 0.5%

Medium (5.4) in javaquarkbbs project javaquarkbbs. EPSS 0.5% chance of exploitation in the next 30 days.

There is a Cross Site Scripting attack (XSS) vulnerability in JavaQuarkBBS <= v2. By entering specific statements into the background tag management module, the attack statement will be stored in the database, and the next victim will be attacked when he accesses the tag module.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-01-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

javaquarkbbs_project:javaquarkbbs

References

https://github.com/ChinaLHR/JavaQuarkBBS/issues/23
https://github.com/ChinaLHR/JavaQuarkBBS/issues/23

Check your stack JSON