CVE-2021-41878
38Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 9.9%
from disclosure to weapon11 days
Published on NVDOct 4
1st PoC+11d
exploitation probability
9.9%top 5% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
A reflected cross-site scripting (XSS) vulnerability exists in the i-Panel Administration System Version 2.0 that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console and it is possible to insert a vulnerable malicious button.
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/50418unverifiedcve_referencepacketstormsecurity.com/files/164519/i-Panel-Administration-System-2.0-Cross-Site-Scripting.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.