CVE-2021-4254

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability has been found in ctrlo lenio and classified as problematic. Affected by this vulnerability is an unknown functionality of the file views/layouts/main.tt of the component Notice Handler. The manipulation of the argument notice.notice.text leads to cross site scripting. The attack can be launched remotely. The name of the patch is aa300555343c1c081951fcb68bfb6852fbba7451. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216211.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-707

Affected software

No affected versions have been published.

Timeline

Published
Dec 18, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-425408.8The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic tCVE-2021-425428.8The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure.CVE-2021-425437.8The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, syCVE-2021-425449.8Missing Rate Limiting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 on the Login Form aCVE-2021-425459.1An insufficient session expiration vulnerability exists in Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27, which allows aCVE-2021-425466.1Insufficient Input Validation in the search functionality of Wordpress plugin Use-Your-Drive prior to 1.18.3 allows unauthenticated user to CVE-2021-425476.1Insufficient Input Validation in the search functionality of Wordpress plugin Out-of-the-Box prior to 1.20.3 allows unauthenticated user to CVE-2021-425486.1Insufficient Input Validation in the search functionality of Wordpress plugin Share-one-Drive prior to 1.15.3 allows unauthenticated user toCVE-2021-425496.1Insufficient Input Validation in the search functionality of Wordpress plugin Lets-Box prior to 1.15.3 allows unauthenticated user to craft CVE-2021-42556.1A vulnerability was found in ctrlo lenio and classified as problematic. Affected by this issue is some unknown functionality of the file vieCVE-2021-425506.6In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious cCVE-2021-425516.1Cross-site Scripting (XSS) vulnerability in the search functionality of AlCoda NetBiblio WebOPAC allows an unauthenticated user to craft a r