What’s Vulnerable › Vulnerabilities

CVE-2020-21987

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-04-27 · updated 2026-06-17
• Weakness: CWE-79

Description

HomeAutomation 3.3.2 is affected by persistent Cross Site Scripting (XSS). XSS vulnerabilities occur when input passed via several parameters to several scripts is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session.

Affected products

• Homeautomation Project Homeautomation: 3.3.2

References

• https://www.exploit-db.com/exploits/47806
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5556.php
• https://www.exploit-db.com/exploits/47806
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5556.php

Get alerted when CVE-2020-21987 or the next vulnerability affects your stack