CVE-2021-4253

A vulnerability, which was classified as problematic, was found in ctrlo lenio. Affected is an unknown function in the library lib/Lenio.pm of the component Ticket Handler. The manipulation of the argument site_id leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is 7a1f90bd2a0ce95b8338ec0926902da975ec64d9. It is recommended to apply a patch to fix this issue. VDB-216210 is the identifier assigned to this vulnerability.

• CWE-707

• https://github.com/ctrlo/lenio/commit/7a1f90bd2a0ce95b8338ec0926902da975ec64d9Patch, Third Party Advisory
• https://vuldb.com/?id.216210Permissions Required, Third Party Advisory
• https://github.com/ctrlo/lenio/commit/7a1f90bd2a0ce95b8338ec0926902da975ec64d9Patch, Third Party Advisory
• https://vuldb.com/?id.216210Permissions Required, Third Party Advisory

Published

Dec 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-42524Adobe Animate version 21.0.9 (and earlier) are affected by a…7.8
• CVE-2021-42525Acrobat Animate versions 21.0.9 (and earlier)is affected by …3.3
• CVE-2021-42526Adobe Premiere Elements 20210809.daily.2242976 (and earlier)…7.8
• CVE-2021-42527Adobe Premiere Elements 20210809.daily.2242976 (and earlier)…7.8
• CVE-2021-42528XMP Toolkit 2021.07 (and earlier) is affected by a Null poin…5.5
• CVE-2021-42529XMP Toolkit SDK version 2021.07 (and earlier) is affected by…7.8
• CVE-2021-42530XMP Toolkit SDK version 2021.07 (and earlier) is affected by…7.8
• CVE-2021-42531XMP Toolkit SDK version 2021.07 (and earlier) is affected by…7.8
• CVE-2021-42532XMP Toolkit SDK version 2021.07 (and earlier) is affected by…7.8
• CVE-2021-42533Adobe Bridge version 11.1.1 (and earlier) is affected by a d…7.8
• CVE-2021-42534The affected product’s web application does not properly neu…6.1
• CVE-2021-42535VISAM VBASE version 11.6.0.6 does not neutralize or incorrec…6.1