VYPR
Medium severity5.4NVD Advisory· Published Feb 27, 2021· Updated Jun 17, 2026

CVE-2021-3151

CVE-2021-3151

Description

i-doit before 1.16.0 is affected by Stored Cross-Site Scripting (XSS) issues that could allow remote authenticated attackers to inject arbitrary web script or HTML via C__MONITORING__CONFIG__TITLE, SM2__C__MONITORING__CONFIG__TITLE, C__MONITORING__CONFIG__PATH, SM2__C__MONITORING__CONFIG__PATH, C__MONITORING__CONFIG__ADDRESS, or SM2__C__MONITORING__CONFIG__ADDRESS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • I Doit/I Doit2 versions
    cpe:2.3:a:i-doit:i-doit:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:i-doit:i-doit:*:*:*:*:*:*:*:*range: <1.16.0
    • (no CPE)range: < 1.16.0
  • i-doit/i-doitdescription

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.