CVE:CVE-2021-41317
CNNVD:CNNVD-202109-1240
XssHunter-Express是用于测试和查找盲XSS。
XssHunter-Express存在授权问题漏洞，该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
solution:Upgrade xss_hunter_express_project xss_hunter_express to a higher version than 2021-09-17,and avoid the version (,2021-09-17)