CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Reflected XSS.This issue affects Atarim: from n/a through <= 4.1.0.
Explanation of Vulnerability in Simple Terms
Atarim versions up to 4.1.0 contain a cross-site scripting (XSS) vulnerability that allows an attacker to inject malicious scripts into the application. The vulnerability requires user interaction—typically clicking a malicious link or visiting a compromised page. When triggered, the injected script executes in the victim's browser with access to their session, potentially allowing the attacker to steal credentials, modify content, or perform actions on behalf of the user.
What an attacker can do
Inject and execute malicious JavaScript in a user's browser session to steal data or perform unauthorized actions.
Potential impact on your site
Users of Atarim up to version 4.1.0 are at risk of account compromise, data theft, and unauthorized modifications if they interact with malicious links.
Conditions required to exploit
No authentication required. Victim must click a malicious link or visit an attacker-controlled page.
Key dates
External resources
Related vulnerabilities
