Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2021-37392

EPSS 0.18% · P40
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2021-37392

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. When the API functions are enabled, the attacker can use API to update user nickname with XSS payload and achieve stored XSS. Users who view the articles published by the injected user will trigger the XSS.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
RPCMS 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
RPCMS是一个应用软件。一个网站CMS系统。 RPCMS 存在跨站脚本漏洞，该漏洞源于在 RPCMS v1.8 版本及以下版本中，nickname 变量在显示在页面上之前没有正确清理。开启API功能后，攻击者可以实现存储型XSS。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2021-37392

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-37392

请登录查看更多情报信息。

Same Patch Batch · n/a · 2021-07-26 · 37 CVEs total

CVE-2020-23239Textpattern CMS跨站脚本漏洞
CVE-2020-18170Abloy Key Manager 安全漏洞
CVE-2020-18171TechSmith Snagit 安全漏洞
CVE-2020-18172Trezor Bridge 代码注入漏洞
CVE-2020-18173AgileBits 1Password 代码问题漏洞
CVE-2020-18174AutoHotkey 安全漏洞
CVE-2020-23234LavaLite 跨站脚本漏洞
CVE-2020-23238Evolution CMS 跨站脚本漏洞
CVE-2020-17952Twothink 安全漏洞
CVE-2020-18169TechSmith SnagIT 安全漏洞
CVE-2020-23240CMS Made Simple 跨站脚本漏洞
CVE-2020-23241CMS Made Simple 跨站脚本漏洞
CVE-2020-23242NavigateCMS和NavigateCMS 跨站脚本漏洞
CVE-2020-23243NavigateCMS 跨站脚本漏洞
CVE-2021-37555TX9 Automatic Food Dispenser 授权问题漏洞
CVE-2021-37576Linux kernel 缓冲区错误漏洞
CVE-2020-18428tinyexr commit 输入验证错误漏洞
CVE-2020-18430tinyexr 输入验证错误漏洞
CVE-2021-25804VideoLAN VLC media player 代码问题漏洞
CVE-2020-126813xlogic 3xLogic Infinias eIDC32 信任管理问题漏洞

Showing top 20 of 37 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2021-37392

No comments yet

Leave a comment