What’s Vulnerable › Vulnerabilities

CVE-2021-47858: Genexis Platinum-4410 P4410-V2-1.31A - 'start_addr' Persistent Cross-Site Scripting

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-21 · updated 2026-06-17
• Weakness: CWE-79

Description

Genexis Platinum-4410 P4410-V2-1.31A contains a stored cross-site scripting vulnerability in the 'start_addr' parameter of the Security Management interface. Attackers can inject malicious scripts through the start source address field that will persist and trigger for privileged users when they access the security management page.

Affected products

• Genexis Platinum-4410: Firmware 1.31A

References

• https://genexis.eu/product/platinum-series/
• https://www.exploit-db.com/exploits/49709
• https://www.vulncheck.com/advisories/genexis-platinum-p-a-startaddr-persistent-cross-site-scripting

Get alerted when CVE-2021-47858 or the next vulnerability affects your stack