CVE-2021-4293

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic has been found in gnuboard youngcart5 up to 5.4.5.1. Affected is an unknown function of the file adm/menu_list_update.php. The manipulation of the argument me_link leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 5.4.5.2 is able to address this issue. The name of the patch is 70daa537adfa47b87af12d85f1e698fff01785ff. It is recommended to upgrade the affected component. VDB-216954 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-79

• https://github.com/gnuboard/youngcart5/commit/70daa537adfa47b87af12d85f1e698fff01785ffPatch, Third Party Advisory
• https://github.com/gnuboard/youngcart5/releases/tag/5.4.5.2Third Party Advisory
• https://vuldb.com/?ctiid.216954Third Party Advisory
• https://vuldb.com/?id.216954Third Party Advisory
• https://github.com/gnuboard/youngcart5/commit/70daa537adfa47b87af12d85f1e698fff01785ffPatch, Third Party Advisory
• https://github.com/gnuboard/youngcart5/releases/tag/5.4.5.2Third Party Advisory
• https://vuldb.com/?ctiid.216954Third Party Advisory
• https://vuldb.com/?id.216954Third Party Advisory

Published

Dec 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-42911A Format String vulnerability exists in DrayTek Vigor 2960 <…9.8
• CVE-2021-42912FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS c…8.8
• CVE-2021-42913The SyncThru Web Service on Samsung SCX-6x55X printers allow…7.5
• CVE-2021-42917Buffer overflow vulnerability in Kodi xbmc up to 19.0, allow…5.5
• CVE-2021-4292A vulnerability was found in OpenMRS Admin UI Module up to 1…6.1
• CVE-2021-42923ShowMyPC 3606 on Windows suffers from a DLL hijack vulnerabi…7.3
• CVE-2021-4294A vulnerability was found in OpenShift OSIN. It has been cla…5.9
• CVE-2021-42940A Cross Site Scripting (XSS) vulnerability exists in Projeqt…9.9
• CVE-2021-42943Stored cross-site scripting (XSS) in admin/usermanager.php o…5.4
• CVE-2021-42945A SQL Injection vulnerability exists in ZZCMS 2021 via the a…9.8
• CVE-2021-42946A Cross Site Scripting (XSS) vulnerability exists in htmly.2…4.8
• CVE-2021-42948HotelDruid Hotel Management Software v3.0.3 and below was di…3.7