CVE-2021-41318

In Progress WhatsUp Gold prior to version 21.1.0, an application endpoint failed to adequately sanitize malicious input. which could allow an unauthenticated attacker to execute arbitrary code in a victim's browser.

• CWE-79

• http://packetstormsecurity.com/files/164359/WhatsUpGold-21.0.3-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://knowledgebase.progress.com/articles/Knowledge/WhatsUp-Gold-Security-Bulletin-September-2021Vendor Advisory
• http://packetstormsecurity.com/files/164359/WhatsUpGold-21.0.3-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://knowledgebase.progress.com/articles/Knowledge/WhatsUp-Gold-Security-Bulletin-September-2021Vendor Advisory

Published

Sep 28, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-41312Affected versions of Atlassian Jira Server and Data Center a…7.5
• CVE-2021-41313Affected versions of Atlassian Jira Server and Data Center a…4.3
• CVE-2021-41314Certain NETGEAR smart switches are affected by a \n injectio…8.8
• CVE-2021-41315The Device42 Remote Collector before 17.05.01 does not sanit…8.8
• CVE-2021-41316The Device42 Main Appliance before 17.05.01 does not sanitiz…8.1
• CVE-2021-41317XSS Hunter Express before 2021-09-17 does not properly enfor…9.8
• CVE-2021-4132livehelperchat is vulnerable to Improper Neutralization of I…5.4
• CVE-2021-41320A technical user has hardcoded credentials in Wallstreet Sui…5.5
• CVE-2021-41322Poly VVX 400/410 5.3.1 allows low-privileged users to change…8.8
• CVE-2021-41323Directory traversal in the Compress feature in Pydio Cells 2…6.5
• CVE-2021-41324Directory traversal in the Copy, Move, and Delete features i…6.5
• CVE-2021-41325Broken access control for user creation in Pydio Cells 2.2.9…6.5