Product:

Connect2

(Lorensbergs)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 1
Date Id Summary Products Score Patch Annotated
2022-01-12 CVE-2021-43960 Lorensbergs Connect2 3.13.7647.20190 is affected by an XSS vulnerability. Exploitation requires administrator privileges and is performed through the Wizard editor of the application. The attack requires an administrator to go into the Wizard editor and enter an XSS payload within the Page title, Page Instructions, Text before, Text after, or Text on side box. Once this has been done, the administrator must click save and finally wait until any user of the application performs a booking for... Connect2 4.8