Medium severity6.1NVD Advisory· Published Sep 10, 2021· Updated Jun 17, 2026
CVE-2021-35976
CVE-2021-35976
Description
The feature to preview a website in Plesk Obsidian 18.0.0 through 18.0.32 on Linux is vulnerable to reflected XSS via the /plesk-site-preview/ PATH, aka PFSI-62467. The attacker could execute JavaScript code in the victim's browser by using the link to preview sites hosted on the server. Authentication is not required to exploit the vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Plesk/Obsidiandescription
Patches
Vulnerability mechanics
References
3- tarekbouali.com/cves/cve-2021-35976nvdExploitThird Party Advisory
- support.plesk.com/hc/en-us/articles/4402990507026nvdVendor Advisory
- www.bouali.io/cves/cve-2021-35976nvdBroken Link
News mentions
0No linked articles in our index yet.