CVE-2021-4296

A vulnerability, which was classified as problematic, has been found in w3c Unicorn. This issue affects the function ValidatorNuMessage of the file src/org/w3c/unicorn/response/impl/ValidatorNuMessage.java. The manipulation of the argument message leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 51f75c31f7fc33859a9a571311c67ae4e95d9c68. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217019.

• CWE-79

• https://github.com/w3c/Unicorn/commit/51f75c31f7fc33859a9a571311c67ae4e95d9c68Patch, Third Party Advisory
• https://github.com/w3c/Unicorn/pull/212Third Party Advisory
• https://vuldb.com/?ctiid.217019Third Party Advisory
• https://vuldb.com/?id.217019Third Party Advisory
• https://github.com/w3c/Unicorn/commit/51f75c31f7fc33859a9a571311c67ae4e95d9c68Patch, Third Party Advisory
• https://github.com/w3c/Unicorn/pull/212Third Party Advisory
• https://vuldb.com/?ctiid.217019Third Party Advisory
• https://vuldb.com/?id.217019Third Party Advisory

Published

Dec 29, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-42950Remote Code Execution (RCE) vulnerability exists in Zepl Not…8.8
• CVE-2021-42951A Remote Code Execution (RCE) vulnerability exists in Algori…8.8
• CVE-2021-42952Zepl Notebooks before 2021-10-25 are affected by a sandbox e…9.9
• CVE-2021-42954Zoho Remote Access Plus Server Windows Desktop Binary fixed …7.8
• CVE-2021-42955Zoho Remote Access Plus Server Windows Desktop binary fixed …7.8
• CVE-2021-42956Zoho Remote Access Plus Server Windows Desktop Binary fixed …8.8
• CVE-2021-42966Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-42967Unrestricted file upload in /novel-admin/src/main/java/com/j…9.8
• CVE-2021-42969Certain Anaconda3 2021.05 are affected by OS command injecti…8.8
• CVE-2021-4297A vulnerability has been found in trampgeek jobe up to 1.6.4…9.8
• CVE-2021-42970Cross Site Scripting (XSS) vulnerability exists in cxuucms v…6.1
• CVE-2021-42972NoMachine Server is affected by Buffer Overflow. IOCTL Handl…8.8