CVE-2021-40223

Rittal CMC PU III Web management (version V3.11.00_2) fails to sanitize user input on several parameters of the configuration (User Configuration dialog, Task Configuration dialog and set logging filter dialog). This allows an attacker to backdoor the device with HTML and browser-interpreted content (such as JavaScript or other client-side scripts). The XSS payload will be triggered when the user accesses some specific sections of the application.

• CWE-79

• https://github.com/asang17/CVE-2021-XSSExploit, Third Party Advisory
• https://github.com/asang17/CVE-2021-XSSExploit, Third Party Advisory

Published

Sep 9, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40211An issue was discovered with ImageMagick 7.1.0-4 via Divisio…7.5
• CVE-2021-40212An exploitable out-of-bounds write vulnerability in PotPlaye…9.8
• CVE-2021-40214Gibbon v22.0.00 suffers from a stored XSS vulnerability with…5.4
• CVE-2021-40219Bolt CMS <= 4.2 is vulnerable to Remote Code Execution. Unsa…8.8
• CVE-2021-4022A vulnerability was found in rizin. The bug involves an ELF6…5.5
• CVE-2021-40222Rittal CMC PU III Web management Version affected: V3.11.00_…7.2
• CVE-2021-40226xpdfreader 4.03 is vulnerable to Buffer Overflow.7.5
• CVE-2021-4023A flaw was found in the io-workqueue implementation in the L…5.5
• CVE-2021-40238A Cross Site Scriptiong (XSS) vulnerability exists in the ad…6.1
• CVE-2021-40239A Buffer Overflow vulnerability exists in the latest version…9.8
• CVE-2021-4024A flaw was found in podman. The `podman machine` function (u…6.5
• CVE-2021-40241xfig 3.2.7 is vulnerable to Buffer Overflow.9.8