CVE-2021-33231

https://notcve.org/view.php?id=CVE-2021-33231

Cross Site Scripting (XSS) vulnerability in New equipment page in EasyVista Service Manager 2018.1.181.1 allows remote attackers to run arbitrary code via the notes field. Una vulnerabilidad de tipo Cross Site Scripting (XSS) en la página New equipment en EasyVista Service Manager versión 2018.1.181.1, permite a atacantes remotos ejecutar código arbitrario por medio del campo de notas • http://easyvista.com https://armysick.github.io/cve-2021-33231 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •