CVE-2021-43032

In XenForo through 2.2.7, a threat actor with access to the admin panel can create a new Advertisement via the Advertising function, and save an XSS payload in the body of the HTML document. This payload will execute globally on the client side.

• CWE-79

• https://github.com/SakuraSamuraii/CVE-2021-43032Exploit, Third Party Advisory
• https://xenforo.com/community/forums/announcements/Release Notes, Vendor Advisory
• https://github.com/SakuraSamuraii/CVE-2021-43032Exploit, Third Party Advisory
• https://xenforo.com/community/forums/announcements/Release Notes, Vendor Advisory

Published

Nov 3, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43026Adobe Premiere Rush version 1.5.16 (and earlier) is affected…7.8
• CVE-2021-43027Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (…7.8
• CVE-2021-43028Adobe Premiere Rush version 1.5.16 (and earlier) is affected…7.8
• CVE-2021-43029Adobe Premiere Rush version 1.5.16 (and earlier) is affected…7.8
• CVE-2021-4303A vulnerability, which was classified as problematic, has be…6.1
• CVE-2021-43030Adobe Premiere Rush versions 1.5.16 (and earlier) allows acc…3.3
• CVE-2021-43033An issue was discovered in Kaseya Unitrends Backup Appliance…9.8
• CVE-2021-43034An issue was discovered in Kaseya Unitrends Backup Appliance…7.8
• CVE-2021-43035An issue was discovered in Kaseya Unitrends Backup Appliance…9.8
• CVE-2021-43036An issue was discovered in Kaseya Unitrends Backup Appliance…9.8
• CVE-2021-43037An issue was discovered in Kaseya Unitrends Backup Appliance…7.8
• CVE-2021-43038An issue was discovered in Kaseya Unitrends Backup Appliance…8.8