CVE-2021-25790
Severity Score
5.4
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Multiple stored cross site scripting (XSS) vulnerabilities in the "Register" module of House Rental and Property Listing 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads in all text fields except for Phone Number and Alternate Phone Number.
Múltiples vulnerabilidades de tipo cross site scripting (XSS) almacenadas en el módulo "Register" de House Rental and Property Listing versión 1.0, permite a atacantes autenticados ejecutar scripts web o HTML arbitrario por medio de cargas útiles diseñadas en todos los campos de texto excepto en Phone Number y Alternate Phone Number
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-01-22 CVE Reserved
- 2021-07-23 CVE Published
- 2021-08-16 First Exploit
- 2023-11-12 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| https://www.sourcecodester.com | Product | |
| https://www.sourcecodester.com/php/14649/house-rental-and-property-listing-php-full-source-code.html | Product |
| URL | Date | SRC |
|---|---|---|
| https://github.com/MrCraniums/CVE-2021-25790-Multiple-Stored-XSS | 2021-08-16 | |
| https://www.exploit-db.com/exploits/49352 | 2024-08-03 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| House Rental And Property Listing Php Project Search vendor "House Rental And Property Listing Php Project" | House Rental And Property Listing Php Search vendor "House Rental And Property Listing Php Project" for product "House Rental And Property Listing Php" | 1.0 Search vendor "House Rental And Property Listing Php Project" for product "House Rental And Property Listing Php" and version "1.0" | - |
Affected
| ||||||