CVE-2021-33853
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-33853
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A Cross-Site Scripting (XSS) attack can cause arbitrary code (javascript) to run in a user’s browser while the browser is connected to a trusted website. As the vehicle for the attack, the application targets the users and not the application itself. Additionally, the XSS payload is executed when the user attempts to access any page of the CRM.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: NVD (National Vulnerability Database)
Vulnerability Title
X2Engine X2CRM 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
X2Engine X2CRM是美国X2Engine公司的一个应用程序。一个面向中小企业的下一代开源社交销售应用程序。 X2Engine X2CRM 存在安全漏洞，该漏洞源于当浏览器连接到信任的网站时，跨站点脚本(XSS)攻击可能导致任意代码(javascript)在用户的浏览器中运行。此外，当用户尝试访问 CRM 的任何页面时，都会执行跨站点脚本攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | X2CRM | 8 | - |
II. Public POCs for CVE-2021-33853
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-33853
请登录查看更多情报信息。
Same Patch Batch · n/a · 2022-03-16 · 80 CVEs total
| CVE-2022-23812 | 9.8 CRITICAL | Malicious Package |
| CVE-2021-23648 | 5.4 MEDIUM | Cross-site Scripting (XSS) |
| CVE-2022-21164 | 3.7 LOW | Denial of Service (DoS) |
| CVE-2021-39697 | Google Android 权限许可和访问控制问题漏洞 | |
| CVE-2021-39708 | Google Android 缓冲区错误漏洞 | |
| CVE-2021-39690 | Google Android 输入验证错误漏洞 | |
| CVE-2021-39685 | Google Android 缓冲区错误漏洞 | |
| CVE-2021-39667 | Google Android 缓冲区错误漏洞 | |
| CVE-2021-39624 | Google Android 资源管理错误漏洞 | |
| CVE-2021-0957 | Google Android 权限许可和访问控制问题漏洞 | |
| CVE-2021-39686 | Google Android 竞争条件问题漏洞 | |
| CVE-2021-39694 | Google Android 权限许可和访问控制问题漏洞 | |
| CVE-2021-39695 | Google Android 权限许可和访问控制问题漏洞 | |
| CVE-2021-39692 | Google Android 权限许可和访问控制问题漏洞 | |
| CVE-2021-39698 | Google Android 资源管理错误漏洞 | |
| CVE-2021-39701 | Google Android 输入验证错误漏洞 | |
| CVE-2021-39702 | Google Android 权限许可和访问控制问题漏洞 | |
| CVE-2021-39703 | Google Android 权限许可和访问控制问题漏洞 | |
| CVE-2021-39704 | Google Android 权限许可和访问控制问题漏洞 | |
| CVE-2021-39706 | Google Android 权限许可和访问控制问题漏洞 |
Showing top 20 of 80 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same weakness: CWE-79
- CVE-2026-27737
BigBlueButton has Stored XSS in bbb-playback replay - CVE-2026-45231
DumbAssets 1.0.11 Stored Cross-Site Scripting via Asset Fiel - CVE-2026-45494
Microsoft Edge (Chromium-based) Spoofing Vulnerability - CVE-2026-7498
Stored XSS in Basamak Informatics' DernekWeb - CVE-2026-3495
Unescaped variables during error page composition
V. Comments for CVE-2021-33853
No comments yet