← All advisories

Medium severity5.4NVD Advisory· Published Aug 2, 2021· Updated Jun 17, 2026

CVE-2021-3351

CVE-2021-3351

Description

OpenPLC runtime V3 through 2016-03-14 allows stored XSS via the Device Name to the web server's Add New Device page.

Affected products

3

Openplcproject/OpenPLC Runtimellm-create2 versions
<=2016-03-14+ 1 more
- (no CPE)range: <=2016-03-14
- (no CPE)
Openplcproject/OpenPLC
cpe:2.3:a:openplcproject:openplc:*:*:*:*:*:*:*:*
Range: <=2016-03-14

Patches

Vulnerability mechanics

References

1

www.youtube.com/watchnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.