CVE-2021-4116

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Dec 15, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-411608.8FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious sCVE-2021-411616.1Combodo iTop is a web based IT Service Management tool. In versions prior to 3.0.0-beta6 the export CSV page don't properly escape the user CVE-2021-411626.1Combodo iTop is a web based IT Service Management tool. In 3.0.0 beta releases prior to beta6 the `ajax.render.php?operation=wizard_helper` CVE-2021-411639.8Discourse is an open source platform for community discussion. In affected versions maliciously crafted requests could lead to remote code eCVE-2021-411645.4CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the Advanced Content Filter (ACCVE-2021-411655.4CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module CVE-2021-411665.3The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. An issue in versions prior to 3.17.1 mayCVE-2021-411677.5modern-async is an open source JavaScript tooling library for asynchronous operations using async/await and promises. In affected versions aCVE-2021-411686.5Snudown is a reddit-specific fork of the Sundown Markdown parser used by GitHub, with Python integration added. In affected versions snudownCVE-2021-411694.8Sulu is an open-source PHP content management system based on the Symfony framework. In versions before 1.6.43 are subject to stored cross sCVE-2021-41174.3yetiforcecrm is vulnerable to Business Logic ErrorsCVE-2021-411709.8neoan3-apps/template is a neoan3 minimal template engine. Versions prior to 1.1.1 have allowed for passing in closures directly into the tem