What’s Vulnerable › Vulnerabilities

CVE-2021-45425

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-12-28 · updated 2026-06-17
• Weakness: CWE-79

Description

Reflected Cross Site Scripting (XSS) in SAFARI Montage versions 8.3 and 8.5 allows remote attackers to execute JavaScript codes.

Affected products

• Safarimontage Safari Montage: 8.3, 8.5

References

• http://packetstormsecurity.com/files/165439/Safari-Montage-8.5-Cross-Site-Scripting.html
• https://drive.google.com/file/d/1IgGyzU_ekMZf8yWq46DwtIaVsBf3gt2U/view?usp=sharing
• https://drive.google.com/file/d/1yVuCfovUpqwp6KKZW1togf5PigxXQ3dh/view?usp=sharing
• http://packetstormsecurity.com/files/165439/Safari-Montage-8.5-Cross-Site-Scripting.html
• https://drive.google.com/file/d/1IgGyzU_ekMZf8yWq46DwtIaVsBf3gt2U/view?usp=sharing
• https://drive.google.com/file/d/1yVuCfovUpqwp6KKZW1togf5PigxXQ3dh/view?usp=sharing

Get alerted when CVE-2021-45425 or the next vulnerability affects your stack