VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Aug 4, 2021· Updated Jun 17, 2026

CVE-2021-38113

CVE-2021-38113

Description

In addBouquet in js/bqe.js in OpenWebif (aka e2openplugin-OpenWebif) through 1.4.7, inserting JavaScript into the Add Bouquet feature of the Bouquet Editor (i.e., bouqueteditor/api/addbouquet?name=) leads to Stored XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Openwebif Project/Openwebif2 versions
    cpe:2.3:a:openwebif_project:openwebif:*:*:*:*:*:enigma2:*:*+ 1 more
    • cpe:2.3:a:openwebif_project:openwebif:*:*:*:*:*:enigma2:*:*range: <=1.4.7
    • (no CPE)range: <=1.4.7
  • OpenWebif/OpenWebifdescription
  • OpenWebif/e2openplugin-OpenWebifllm-create
    Range: <=1.4.7

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.