{ "schema_version": "1.4.0", "id": "GHSA-3425-gj4f-6wvw", "modified": "2022-02-09T00:00:51Z", "published": "2022-02-09T00:00:51Z", "aliases": [ "CVE-2021-42639" ], "details": "PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to multiple reflected cross site scripting vulnerabilities. Attacker controlled input is reflected back in the page without sanitization.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42639" }, { "type": "WEB", "url": "https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints" }, { "type": "WEB", "url": "https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html" }, { "type": "WEB", "url": "https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite" }, { "type": "WEB", "url": "https://www.printerlogic.com/security-bulletin" }, { "type": "WEB", "url": "https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite" }, { "type": "WEB", "url": "https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert" }, { "type": "WEB", "url": "http://printerlogic.com" } ], "database_specific": { "cwe_ids": [ "CWE-79" ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2022-02-02T18:15:00Z" } }