What’s Vulnerable › Vulnerabilities

CVE-2021-26710

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-02-05 · updated 2026-06-17
• Weakness: CWE-79

Description

A cross-site scripting (XSS) issue in the login panel in Redwood Report2Web 4.3.4.5 and 4.5.3 allows remote attackers to inject JavaScript via the signIn.do urll parameter.

Affected products

• Redwood Report2Web: 4.3.4.5, 4.5.3

References

• https://vict0ni.me/redwood-report2web-xss-and-frame-injection/
• https://vict0ni.me/report2web-xss-frame-injection.html
• https://vict0ni.me/redwood-report2web-xss-and-frame-injection/
• https://vict0ni.me/report2web-xss-frame-injection.html

Get alerted when CVE-2021-26710 or the next vulnerability affects your stack