CVE-2021-28290: IDENTITYSERVER4.ADMIN Project IDENTITYSERVER4.ADMIN

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability in Skoruba IdentityServer4.Admin before 2.0.0 via unencoded value passed to the data-secret-value parameter.

Affected products

• IDENTITYSERVER4.ADMIN Project IDENTITYSERVER4.ADMIN: before 2.0.0 (fixed in 2.0.0)

Published 2022-05-11. Last modified 2026-06-17.