CVE-2021-28126

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

index.jsp in TranzWare e-Commerce Payment Gateway (TWEC PG) before 3.1.27.5 had a Stored cross-site scripting (XSS) vulnerability

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Mar 19, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-281277.5An issue was discovered in Stormshield SNS through 4.2.1. A brute-force attack can occur.CVE-2021-281288.1In Strapi through 3.6.0, the admin panel allows the changing of one's own password without entering the current password. An attacker who gaCVE-2021-281297.8While working on Apache OpenOffice 4.1.8 a developer discovered that the DEB package did not install using root, but instead used a userid aCVE-2021-281307.8Dr.Web Firewall 12.5.2.4160 on Windows incorrectly restricts applications signed by Dr.Web. A DLL for a custom payload within a legitimate bCVE-2021-281317.5Impala sessions use a 16 byte secret to verify that the session is not being hijacked by another user. However, these secrets appear in the CVE-2021-281329.8LUCY Security Awareness Software through 4.7.x allows unauthenticated remote code execution because the Migration Tool (in the Support sectiCVE-2021-281334.3Zoom through 5.5.4 sometimes allows attackers to read private information on a participant's screen, even though the participant never attemCVE-2021-281349.8Clipper before 1.0.5 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRendererCVE-2021-281356.5The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of continuous unsolicited LCVE-2021-281366.5The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of multiple LMP IO CapabiliCVE-2021-281398.8The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LCVE-2021-281419.8An issue was discovered in Progress Telerik UI for ASP.NET AJAX 2021.1.224. It allows unauthorized access to MicrosoftAjax.js through the Te