CVE-2021-39390

Stored XSS in PartKeepr 1.4.0 Edit section in multiple api endpoints via name parameter.

• CWE-79

• https://demo.partkeepr.org/Product
• https://github.com/partkeepr/PartKeepr/issues/1237Exploit, Issue Tracking, Third Party Advisory
• https://partkeepr.org/Product
• https://demo.partkeepr.org/Product
• https://github.com/partkeepr/PartKeepr/issues/1237Exploit, Issue Tracking, Third Party Advisory
• https://partkeepr.org/Product

Published

May 3, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-39378A SQL Injection vulnerability exists in openSIS 8.0 when MyS…9.8
• CVE-2021-39379A SQL Injection vulnerability exists in openSIS 8.0 when MyS…9.8
• CVE-2021-3938snipe-it is vulnerable to Improper Neutralization of Input D…5.4
• CVE-2021-39383DWSurvey v3.2.0 was discovered to contain a remote command e…9.8
• CVE-2021-39384DWSurvey v3.2.0 was discovered to contain an arbitrary file …9.8
• CVE-2021-3939Ubuntu-specific modifications to accountsservice (in patch f…7.8
• CVE-2021-39391Cross Site Scripting (XSS) vulnerability exists in the admin…6.1
• CVE-2021-39392The management tool in MyLittleBackup up to and including 1.…9.8
• CVE-2021-39393mm-wiki v0.2.1 was discovered to contain a cross-site script…6.1
• CVE-2021-39394mm-wiki v0.2.1 was discovered to contain a Cross-Site Reques…6.5
• CVE-2021-3940Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-39402MaianAffiliate v.1.0 is suffers from code injection by addin…7.2