Intrusion PreventionMontala.Limited.ResourceSpace.index.php.XSS
Description
This indicates an attack attempt to exploit a Cross-Site Scripting Vulnerability in Montala Limited ResourceSpace.
The vulnerability is due to improper input validation of user input passed to index.php page. An unauthenticated user could exploit the vulnerability by sending malicious requests to the target server. Successful exploitation could result in the execution of script code in the security context of the browser of any user visiting the affected pages.
Affected Products
Montala Limited ResourceSpace 9.5 and prior
Impact
System Compromise: Remote attackers can execute arbitrary script code in the context of the affected application.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://www.resourcespace.com/versions
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 50960 |
| Created | Dec 01, 2021 |
| Updated | Feb 11, 2022 |
| Risk |
|
| CVE ID | CVE-2021-41951 |
| Exploit Prediction Score | 75.41% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris, MacOS |
| Affected App | PHP_app |