TI-2021-16299 CVE-2021-38751 · GHSA-mg75-hvvv-r45q
A HTTP Host header attack exists in ExponentCMS 2.6 and below in /exponent_constants.php.
Priority LOW 25
A HTTP Host header attack exists in ExponentCMS 2.6 and below in /exponent_constants.php.
Exponentcms
Records61All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical33CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9
Exploited now
Exponentcms records in CISA KEVNo Exponentcms vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
1 record in Exponentcms · all components