CVE-2021-28054

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-07-16 · updated 2026-06-17
Weakness: CWE-79

Description

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site Scripting (XSS) issue in "Configuration > Hosts" allows remote authenticated users to inject arbitrary web script or HTML via the Alias parameter.

Affected products

centreon: 20.10.0

References

https://docs.centreon.com/current/en/
https://github.com/centreon/centreon/releases/tag/20.04.13
https://redshell.co
https://docs.centreon.com/current/en/
https://github.com/centreon/centreon/releases/tag/20.04.13
https://redshell.co

Get alerted when CVE-2021-28054 or the next vulnerability affects your stack