CVE-2021-43725

There is a Cross Site Scripting (XSS) vulnerability in SpotPage_login.php of Spotweb 1.5.1 and below, which allows remote attackers to inject arbitrary web script or HTML via the data[performredirect] parameter.

• CWE-79

• https://github.com/spotweb/spotweb/commit/2bfa001689aae96009688a193c64478647ba45a1Patch, Third Party Advisory
• https://github.com/spotweb/spotweb/issues/718Exploit, Issue Tracking, Third Party Advisory
• https://github.com/spotweb/spotweb/commit/2bfa001689aae96009688a193c64478647ba45a1Patch, Third Party Advisory
• https://github.com/spotweb/spotweb/issues/718Exploit, Issue Tracking, Third Party Advisory

Published

Mar 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43711The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.…9.8
• CVE-2021-43712Stored XSS in Add New Employee Form in Sourcecodester Employ…5.4
• CVE-2021-4372The WooCommerce Dynamic Pricing and Discounts plugin for Wor…6.1
• CVE-2021-43721Leanote 2.7.0 is vulnerable to Cross Site Scripting (XSS) in…6.1
• CVE-2021-43722D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The…9.8
• CVE-2021-43724A Cross Site Scripting (XSS) vulnerability exits in Subrion …4.8
• CVE-2021-43728Pix-Link MiNi Router 28K.MiniRouter.20190211 was discovered …5.4
• CVE-2021-43729Pix-Link MiNi Router 28K.MiniRouter.20190211 was discovered …5.4
• CVE-2021-4373The Better Search plugin for WordPress is vulnerable to Cros…4.3
• CVE-2021-43734kkFileview v4.0.0 has arbitrary file read through a director…7.5
• CVE-2021-43735CmsWing 1.3.7 is affected by a SQLi vulnerability via parame…9.8
• CVE-2021-43736CmsWing CMS 1.3.7 is affected by a Remote Code Execution (RC…9.8