CVE-2021-45843

glFusion CMS v1.7.9 is affected by a reflected Cross Site Scripting (XSS) vulnerability. The value of the title request parameter is copied into the value of an HTML tag attribute which is encapsulated in double quotation marks. This input was echoed unmodified in the application's response.

• CWE-79

• https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/glfusion/XSS-ReflectedExploit, Third Party Advisory
• https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/glfusion/XSS-ReflectedExploit, Third Party Advisory

Published

Sep 29, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-45836An authenticated attacker can execute arbitrary commands as …8.8
• CVE-2021-45837It is possible to execute arbitrary commands as root in Terr…9.8
• CVE-2021-45839It is possible to obtain the first administrator's hash set …6.5
• CVE-2021-45840It is possible to execute arbitrary commands as root in Terr…9.8
• CVE-2021-45841In Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517),…8.1
• CVE-2021-45842It is possible to obtain the first administrator's hash set …7.5
• CVE-2021-45844Improper sanitization in the invocation of ODA File Converte…7.8
• CVE-2021-45845The Path Sanity Check script of FreeCAD 0.19 is vulnerable t…7.8
• CVE-2021-45846A flaw in the AMF parser of Slic3r libslic3r 1.3.0 allows an…5.5
• CVE-2021-45847Several missing input validations in the 3MF parser componen…5.5
• CVE-2021-45848Denial of service (DoS) vulnerability in Nicotine+ 3.0.3 and…7.5
• CVE-2021-45851A Server-Side Request Forgery (SSRF) attack in FUXA 1.1.3 ca…7.5