CVE-2021-4265: siwapp-ror cross site scripting

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-12-21 · updated 2026-06-17
Weakness: CWE-707

Description

A vulnerability was found in siwapp-ror. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 924d16008cfcc09356c87db01848e45290cb58ca. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216467.

Affected products

siwapp-ror: before 2021-10-19 — fixed in 2021-10-19

How to fix

Upgrade to a fixed version: siwapp-ror 2021-10-19. Check the vendor advisory for mitigations.

References

https://github.com/siwapp/siwapp-ror/commit/924d16008cfcc09356c87db01848e45290cb58ca
https://github.com/siwapp/siwapp-ror/pull/365
https://vuldb.com/?id.216467
https://github.com/siwapp/siwapp-ror/commit/924d16008cfcc09356c87db01848e45290cb58ca
https://github.com/siwapp/siwapp-ror/pull/365
https://vuldb.com/?id.216467

Get alerted when CVE-2021-4265 or the next vulnerability affects your stack