What’s Vulnerable › Vulnerabilities

CVE-2021-26711

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-02-05 · updated 2026-06-17
• Weakness: CWE-610

Description

A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/Online_Help/NetHelp/default.htm turl parameter.

Affected products

• Redwood Report2Web: 4.3.4.5

References

• https://vict0ni.me/redwood-report2web-xss-and-frame-injection/
• https://vict0ni.me/report2web-xss-frame-injection.html
• https://vict0ni.me/redwood-report2web-xss-and-frame-injection/
• https://vict0ni.me/report2web-xss-frame-injection.html

Get alerted when CVE-2021-26711 or the next vulnerability affects your stack