CVE-2021-29663

CourseMS (aka Course Registration Management System) 2.1 is affected by cross-site scripting (XSS). When an attacker with access to an Admin account creates a Job Title in the Site area (aka the admin/add_jobs.php name parameter), they can insert an XSS payload. This payload will execute whenever anyone visits the registration page.

• CWE-79

• http://sourceforge.net/projects/coursemsProduct, Third Party Advisory
• https://github.com/cptsticky/A-0day-Per-Day-Keeps-The-Cope-Away/blob/main/CVE-2021-29663Exploit, Third Party Advisory
• http://sourceforge.net/projects/coursemsProduct, Third Party Advisory
• https://github.com/cptsticky/A-0day-Per-Day-Keeps-The-Cope-Away/blob/main/CVE-2021-29663Exploit, Third Party Advisory

Published

Mar 31, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-29657arch/x86/kvm/svm/nested.c in the Linux kernel before 5.11.12…7.4
• CVE-2021-29658The unofficial vscode-rufo extension before 0.0.4 for Visual…8.8
• CVE-2021-29659ownCloud 10.7 has an incorrect access control vulnerability,…6.5
• CVE-2021-29660A Cross-Site Request Forgery (CSRF) vulnerability in en/cfg_…8.8
• CVE-2021-29661Softing AG OPC Toolbox through 4.10.1.13035 allows /en/diag_…5.4
• CVE-2021-29662The Data::Validate::IP module through 0.29 for Perl does not…7.5
• CVE-2021-29665IBM Security Verify Access 20.07 is vulnerable to a stack ba…7.8
• CVE-2021-29666IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5…5.4
• CVE-2021-29667IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5…7.8
• CVE-2021-29668IBM Jazz Foundation and IBM Engineering products are vulnera…5.4
• CVE-2021-29669IBM Jazz Foundation 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is…5.4
• CVE-2021-29670IBM Jazz Foundation and IBM Engineering products are vulnera…5.4