.. / CVE-2021-21801

• XSS
• Nuclei
• Web

Exploit for Advantech R-SeeNet - Cross-Site Scripting (CVE-2021-21801)

Description:

Advantech R-SeeNet contains a cross-site scripting vulnerability in the device_graph_page.php script via the graph parameter. A specially crafted URL by an attacker can lead to arbitrary JavaScript code execution.

Nuclei Template

View the template here CVE-2021-21801.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-21801.yaml

References: