CVE-2021-4274

A vulnerability, which was classified as problematic, has been found in sileht bird-lg. This issue affects some unknown processing of the file templates/layout.html. The manipulation of the argument request_args leads to cross site scripting. The attack may be initiated remotely. The name of the patch is ef6b32c527478fefe7a4436e10b96ee28ed5b308. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216479.

• CWE-707
• CWE-79

• https://github.com/sileht/bird-lg/commit/ef6b32c527478fefe7a4436e10b96ee28ed5b308Patch, Third Party Advisory
• https://github.com/sileht/bird-lg/pull/82Patch, Third Party Advisory
• https://vuldb.com/?id.216479Third Party Advisory
• https://github.com/sileht/bird-lg/commit/ef6b32c527478fefe7a4436e10b96ee28ed5b308Patch, Third Party Advisory
• https://github.com/sileht/bird-lg/pull/82Patch, Third Party Advisory
• https://vuldb.com/?id.216479Third Party Advisory

Published

Dec 21, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-42733Adobe Bridge version 11.1.1 (and earlier) is affected by a N…5.5
• CVE-2021-42734Adobe Photoshop version 22.5.1  and earlier versions   are a…5.5
• CVE-2021-42735Adobe Photoshop version 22.5.1 (and earlier versions ) is af…7.8
• CVE-2021-42737Adobe Prelude version 10.1 (and earlier) is affected by a me…7.8
• CVE-2021-42738Adobe Prelude version 10.1 (and earlier) is affected by a me…7.8
• CVE-2021-42739The firewire subsystem in the Linux kernel through 5.14.13 h…6.7
• CVE-2021-42740The shell-quote package before 1.7.3 for Node.js allows comm…9.8
• CVE-2021-42743A misconfiguration in the node default path allows for local…7.8
• CVE-2021-42744Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does n…5.5
• CVE-2021-42748In Beaver Builder through 2.5.0.3, attackers can bypass the …5.3
• CVE-2021-42749In Beaver Themer, attackers can bypass conditional logic con…5.3
• CVE-2021-4275A vulnerability, which was classified as problematic, was fo…8.8