CVE-2021-4255

A vulnerability was found in ctrlo lenio and classified as problematic. Affected by this issue is some unknown functionality of the file views/contractor.tt. The manipulation of the argument contractor.name leads to cross site scripting. The attack may be launched remotely. The name of the patch is e1646d5cd0a2fbab9eb505196dd2ca1c9e4cdd97. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216212.

• CWE-707

• https://github.com/ctrlo/lenio/commit/e1646d5cd0a2fbab9eb505196dd2ca1c9e4cdd97Patch, Third Party Advisory
• https://vuldb.com/?id.216212Third Party Advisory
• https://github.com/ctrlo/lenio/commit/e1646d5cd0a2fbab9eb505196dd2ca1c9e4cdd97Patch, Third Party Advisory
• https://vuldb.com/?id.216212Third Party Advisory

Published

Dec 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-42544Missing Rate Limiting in Web Applications operating on Busin…9.8
• CVE-2021-42545An insufficient session expiration vulnerability exists in B…9.1
• CVE-2021-42546Insufficient Input Validation in the search functionality of…6.1
• CVE-2021-42547Insufficient Input Validation in the search functionality of…6.1
• CVE-2021-42548Insufficient Input Validation in the search functionality of…6.1
• CVE-2021-42549Insufficient Input Validation in the search functionality of…6.1
• CVE-2021-42550In logback version 1.2.7 and prior versions, an attacker wit…6.6
• CVE-2021-42551Cross-site Scripting (XSS) vulnerability in the search funct…6.1
• CVE-2021-42552Cross-site Scripting (XSS) vulnerability in ArchivistaBox we…6.1
• CVE-2021-42553A buffer overflow vulnerability in stm32_mw_usb_host of STMi…9.8
• CVE-2021-42554An issue was discovered in Insyde InsydeH2O with Kernel 5.0 …8.2
• CVE-2021-42555Pexip Infinity before 26.2 allows temporary remote Denial of…7.5