CVE-2021-3026

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Invision Community IPS Community Suite before 4.5.4.2 allows XSS during the quoting of a post or comment.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jan 5, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-302607.8Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuratCVE-2021-302617.8Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in SCVE-2021-302627.8Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory in Snapdragon Auto, CVE-2021-302637.8Possible race condition can occur due to lack of synchronization mechanism when On-Device Logging node open twice concurrently in SnapdragonCVE-2021-302646.7Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto, Snapdragon ConnectivCVE-2021-302656.7Possible memory corruption due to improper validation of memory address while processing user-space IOCTL for clearing Filter and Route statCVE-2021-302666.7Possible use after free due to improper memory validation when initializing new interface via Interface add command in Snapdragon Auto, SnapCVE-2021-302677.8Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Snapdragon Compute, SnCVE-2021-302687.8Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon CoCVE-2021-302697.8Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, SnapdragonCVE-2021-30276.5app/views_mod/user/user.py in LibrIT PaSSHport through 2.5 is affected by LDAP Injection. There is an information leak through the crafting CVE-2021-302707.8Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon A
CVE-2021-3026: Medium severity, CVSS 6.1 | Vulnix