XSS Vulnerability in ReCaptcha Solver 5.7 Allows Remote Browser Control

XSS Vulnerability in ReCaptcha Solver 5.7 Allows Remote Browser Control

CVE-2021-39362 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

An XSS issue was discovered in ReCaptcha Solver 5.7. A response from Anti-Captcha.com, RuCaptcha.com, 2captcha.com, DEATHbyCAPTCHA.com, ImageTyperz.com, or BestCaptchaSolver.com in setCaptchaCode() is inserted into the DOM as HTML, resulting in full control over the user's browser by these servers.

Learn more about our Cis Benchmark Audit For Server Software.