CVE-2021-44263

Gurock TestRail before 7.2.4 mishandles HTML escaping.

• CWE-79

• https://discuss.gurock.com/t/testrail-7-2-4-released-to-cloud/20248Release Notes, Vendor Advisory
• https://gist.github.com/miglen/b09498b4b9fe1be58973bd474af125abExploit, Third Party Advisory
• https://discuss.gurock.com/t/testrail-7-2-4-released-to-cloud/20248Release Notes, Vendor Advisory
• https://gist.github.com/miglen/b09498b4b9fe1be58973bd474af125abExploit, Third Party Advisory

Published

Dec 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-44255Authenticated remote code execution in MotionEye <= 0.42.1 a…7.2
• CVE-2021-44259A vulnerability is in the 'wx.html' page of the WAVLINK AC12…9.8
• CVE-2021-4426The Absolute Reviews plugin for WordPress is vulnerable to C…4.3
• CVE-2021-44260A vulnerability is in the 'live_mfg.html' page of the WAVLIN…7.5
• CVE-2021-44261A vulnerability is in the 'BRS_top.html' page of the Netgear…5.3
• CVE-2021-44262A vulnerability is in the 'MNU_top.htm' page of the Netgear …7.5
• CVE-2021-44266GUnet Open eClass (aka openeclass) before 3.12.2 allows XSS …6.1
• CVE-2021-44269An out of bounds read was found in Wavpack 5.4.0 in processi…5.5
• CVE-2021-4427The Vuukle Comments, Reactions, Share Bar, Revenue plugin fo…4.3
• CVE-2021-44273e2guardian v5.4.x <= v5.4.3r is affected by missing SSL cert…7.4
• CVE-2021-44277Librenms 21.11.0 is affected by a Cross Site Scripting (XSS)…6.1
• CVE-2021-44278Librenms 21.11.0 is affected by a path manipulation vulnerab…9.8