Description

Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated by administrators viewing the "Request Statistics" page.

Remediation

References

CVE-2021-39391

Related Vulnerabilities

b2evolution Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-7150)

silverstripeCMS Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') Vulnerability (CVE-2021-41559)

Oracle JRE CVE-2025-30749 Vulnerability (CVE-2025-30749)

WordPress Plugin AVH Extended Categories Widgets SQL Injection (4.0.0)

Ruby on Rails Uncontrolled Resource Consumption Vulnerability (CVE-2020-8185)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2021-39391