CVE-2021-44209

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

OX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Mar 28, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-44214.3The Advanced Popups plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.1. This is due toCVE-2021-442106.1OX App Suite through 7.10.5 allows XSS via NIFF (Notation Interchange File Format) data.CVE-2021-442115.4OX App Suite through 7.10.5 allows XSS via the class attribute of an element in an HTML e-mail signature.CVE-2021-442126.1OX App Suite through 7.10.5 allows XSS via a trailing control character such as the SCRIPT\t substring.CVE-2021-442136.1OX App Suite through 7.10.5 allows XSS via uuencoding in a multipart/alternative message.CVE-2021-442155.5Northern.tech CFEngine Enterprise 3.15.4 before 3.15.5 has Insecure Permissions that may allow unauthorized local users to have an unspecifiCVE-2021-442165.5Northern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions that may allow unauthorized local users toCVE-2021-442176.1In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting (XSS) vulnerability in the comments component of the reports viewer alCVE-2021-442199.8Gin-Vue-Admin before 2.4.6 mishandles a SQL database.CVE-2021-44224.3The POST SMTP Mailer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.20. This is due CVE-2021-442217.5A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00). The affected systems do not properly validate inpCVE-2021-442229.1A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00). The underlying MQTT service of affected systems d