CVE-2021-41557

Sofico Miles RIA 2020.2 Build 127964T is affected by Stored Cross Site Scripting (XSS). An attacker with access to a user account of the RIA IT or the Fleet role can create a crafted work order in the damage reports section (or change existing work orders). The XSS payload is in the work order number.

• CWE-79

• http://packetstormsecurity.com/files/165278/Sofico-Miles-RIA-2020.2-Build-127964T-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://www.sofico.globalVendor Advisory
• http://packetstormsecurity.com/files/165278/Sofico-Miles-RIA-2020.2-Build-127964T-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://www.sofico.globalVendor Advisory

Published

Dec 15, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-41551Leostream Connection Broker 9.0.40.17 allows administrators …4.9
• CVE-2021-41552CommScope SURFboard SBG6950AC2 9.1.103AA23 devices allow Com…8.8
• CVE-2021-41553In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), th…9.8
• CVE-2021-41554ARCHIBUS Web Central 21.3.3.815 (a version from 2014) does n…8.8
• CVE-2021-41555In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), XS…6.1
• CVE-2021-41556sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 al…10
• CVE-2021-41558The set_user extension module before 3.0.0 for PostgreSQL al…9.8
• CVE-2021-41559Silverstripe silverstripe/framework 4.8.1 has a quadratic bl…6.5
• CVE-2021-4156An out-of-bounds read flaw was found in libsndfile's FLAC co…7.1
• CVE-2021-41560OpenCATS through 0.9.6 allows remote attackers to execute ar…9.8
• CVE-2021-41561Improper Input Validation vulnerability in Parquet-MR of Apa…7.5
• CVE-2021-41562A vulnerability in Snow Snow Agent for Windows allows a non-…6.1