.. / CVE-2021-21803

• XSS
• Nuclei
• Web

Exploit for Advantech R-SeeNet - Cross-Site Scripting (CVE-2021-21803)

Description:

Advantech R-SeeNet is vulnerable to cross-site scripting via the device_graph_page.php script via the is2sim parameter. A specially crafted URL by an attacker and visited by a victim can lead to arbitrary JavaScript code execution.

Nuclei Template

View the template here CVE-2021-21803.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-21803.yaml

References: