Medium severity5.4NVD Advisory· Published Jul 9, 2021· Updated Aug 14, 2026
CVE-2021-30119
CVE-2021-30119
Description
Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to perform a Cross Site Scripting attack Example request: https://x.x.x.x/HelpDeskTab/rcResults.asp?result= The same is true for the parameter FileName of /done.asp Eaxmple request: https://x.x.x.x/done.asp?FileName=";alert(1);a="&PathData=&originalName=shell.aspx&FileSize=4388&TimeElapsed=00:00:00.078
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
3- csirt.divd.nl/2021/07/07/Kaseya-Limited-Disclosure/nvdPatchThird Party Advisory
- csirt.divd.nl/DIVD-2021-00011nvdPatchThird Party Advisory
- csirt.divd.nl/CVE-2021-30119nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.