CVE-2021-25790
Last modified
CVE-2021-25790 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. Multiple stored cross site scripting (XSS) vulnerabilities in the "Register" module of House Rental and Property Listing 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads in all text fields except for Phone Number and Alternate Phone Number.. EPSS estimates a 0.88% chance of exploitation in the next 30 days.
Description
Multiple stored cross site scripting (XSS) vulnerabilities in the "Register" module of House Rental and Property Listing 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads in all text fields except for Phone Number and Alternate Phone Number.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| House Rental And Property Listing Php Project | House Rental And Property Listing Php | 1.0 |
References
- https://www.exploit-db.com/exploits/49352Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/49352Exploit, Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-25790?
How severe is CVE-2021-25790?
How do I fix CVE-2021-25790?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-25779Baby Care System v1.0 is vulnerable to SQL injection via the…9.8
- CVE-2021-25780An arbitrary file upload vulnerability has been identified i…7.2
- CVE-2021-25783Taocms v2.5Beta5 was discovered to contain a blind SQL injec…7.2
- CVE-2021-25784Taocms v2.5Beta5 was discovered to contain a blind SQL injec…7.2
- CVE-2021-25785Taocms v2.5Beta5 was discovered to contain a cross-site scri…4.8
- CVE-2021-25786An issue was discovered in QPDF version 10.0.4, allows remot…5.3
- CVE-2021-25791Multiple stored cross site scripting (XSS) vulnerabilities i…5.4
- CVE-2021-25801A buffer overflow vulnerability in the __Parse_indx componen…7.1
- CVE-2021-25802A buffer overflow vulnerability in the AVI_ExtractSubtitle c…7.1
- CVE-2021-25803A buffer overflow vulnerability in the vlc_input_attachment_…7.1
- CVE-2021-25804A NULL-pointer dereference in "Open" in avi.c of VideoLAN VL…7.5
- CVE-2021-25808A code injection vulnerability in backup/plugin.php of Bludi…7.8
Are you affected by CVE-2021-25790?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST