CVE-2021-32106

In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the _GET['replace'] variable. As a result, arbitrary Javascript code can get executed.

• CWE-79

• https://github.com/icecoder/ICEcoderProduct, Third Party Advisory
• https://groups.google.com/g/icecoder/c/xcAc8_1UPxQExploit, Third Party Advisory
• https://prophaze.com/cve/icecoder-8-0-multipe-results-php-replace-cross-site-scripting/Third Party Advisory
• https://github.com/icecoder/ICEcoderProduct, Third Party Advisory
• https://groups.google.com/g/icecoder/c/xcAc8_1UPxQExploit, Third Party Advisory
• https://prophaze.com/cve/icecoder-8-0-multipe-results-php-replace-cross-site-scripting/Third Party Advisory

Published

Jun 8, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-3210components/Modals/HelpTexts/GenericAll/GenericAll.jsx in Blo…9.6
• CVE-2021-32100A remote file inclusion vulnerability exists in Artica Pando…6.5
• CVE-2021-32101The Patient Portal of OpenEMR 5.0.2.1 is affected by a incor…8.2
• CVE-2021-32102A SQL injection vulnerability exists (with user privileges) …8.8
• CVE-2021-32103A Stored XSS vulnerability in interface/usergroup/usergroup_…4.8
• CVE-2021-32104A SQL injection vulnerability exists (with user privileges) …8.8
• CVE-2021-32122Certain NETGEAR devices are affected by CSRF. This affects E…8
• CVE-2021-32132The abst_box_size function in GPAC 1.0.1 allows attackers to…5.5
• CVE-2021-32134The gf_odf_desc_copy function in GPAC 1.0.1 allows attackers…5.5
• CVE-2021-32135The trak_box_size function in GPAC 1.0.1 allows attackers to…5.5
• CVE-2021-32136Heap buffer overflow in the print_udta function in MP4Box in…7.8
• CVE-2021-32137Heap buffer overflow in the URL_GetProtocolType function in …5.5