CVE-2021-47716

CVE-2021-47716 describes multiple authenticated cross-site scripting (XSS) vulnerabilities in Orangescrum version 1.8.0. Attackers can inject malicious scripts into victim browsers by manipulating parameters like 'projid', 'CS_message', and 'name' through crafted payloads. This vulnerability carries a CVSS score of 5.4 (Medium), indicating a network-based attack with low privileges required, user interaction, and potential for limited impact on confidentiality and integrity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.