What’s Vulnerable › Vulnerabilities

CVE-2021-39362

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-08-22 · updated 2026-06-17
• Weakness: CWE-79

Description

An XSS issue was discovered in ReCaptcha Solver 5.7. A response from Anti-Captcha.com, RuCaptcha.com, 2captcha.com, DEATHbyCAPTCHA.com, ImageTyperz.com, or BestCaptchaSolver.com in setCaptchaCode() is inserted into the DOM as HTML, resulting in full control over the user's browser by these servers.

Affected products

• Recaptcha Solver Project Recaptcha Solver: 5.7

References

• https://thesamarkand.tumblr.com/post/660171228514009088/xss-vulnerability-in-recaptcha-solver-by-dozz
• https://thesamarkand.tumblr.com/post/660171228514009088/xss-vulnerability-in-recaptcha-solver-by-dozz

Get alerted when CVE-2021-39362 or the next vulnerability affects your stack