VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Sep 15, 2021· Updated Jun 17, 2026

CVE-2021-40238

CVE-2021-40238

Description

A Cross Site Scriptiong (XSS) vulnerability exists in the admin panel in Webuzo < 2.9.0 via an HTTP request to a non-existent page, which is activated by administrators viewing the "Error Log" page. An attacker can leverage this to achieve Unauthenticated Remote Code Execution via the "Cron Jobs" functionality of Webuzo.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Webuzo/Webuzo2 versions
    cpe:2.3:a:webuzo:webuzo:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:webuzo:webuzo:*:*:*:*:*:*:*:*range: <2.9.0
    • (no CPE)range: <2.9.0
  • Webuzo/Webuzodescription

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.