← All advisories

Medium severity6.1NVD Advisory· Published Jan 18, 2021· Updated Jun 17, 2026

CVE-2021-25295

CVE-2021-25295

Description

OpenCATS through 0.9.5-3 has multiple Cross-site Scripting (XSS) issues.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Opencats/Opencats2 versions
cpe:2.3:a:opencats:opencats:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:opencats:opencats:*:*:*:*:*:*:*:*range: <=0.9.5-3
- (no CPE)range: <=0.9.5-3
OpenCATS/OpenCATSdescription

Patches

Vulnerability mechanics

References

3

github.com/snoopysecurity/snoopysecurity.github.io/blob/master/web-application-security/2021/01/16/09_opencats_php_object_injection.htmlnvdExploitThird Party Advisory
snoopysecurity.github.io/web-application-security/2021/01/16/09_opencats_php_object_injection.htmlnvdExploitThird Party Advisory
www.opencats.org/news/nvdProductVendor Advisory

News mentions

0

No linked articles in our index yet.