CVE-2021-35976
N/A
N/A
Summary
The feature to preview a website in Plesk Obsidian 18.0.0 through 18.0.32 on Linux is vulnerable to reflected XSS via the /plesk-site-preview/ PATH, aka PFSI-62467. The attacker could execute JavaScript code in the victim's browser by using the link to preview sites hosted on the server. Authentication is not required to exploit the vulnerability.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://www.bouali.io/cves/cve-2021-35976
- https://support.plesk.com/hc/en-us/articles/4402990507026
- https://tarekbouali.com/cves/cve-2021-35976
References
- https://www.bouali.io/cves/cve-2021-35976
- https://support.plesk.com/hc/en-us/articles/4402990507026
- https://tarekbouali.com/cves/cve-2021-35976
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.