Medium severity5.4NVD Advisory· Published Dec 9, 2025· Updated Jun 17, 2026
CVE-2021-47729
CVE-2021-47729
Description
Selea Targa IP OCR-ANPR Camera contains a stored cross-site scripting vulnerability in the 'files_list' parameter that allows attackers to inject malicious HTML and script code. Attackers can send a POST request to /cgi-bin/get_file.php with crafted payload to execute arbitrary scripts in victim's browser session.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
17cpe:2.3:a:selea:carplateserver:3.005\(191112\):*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:selea:carplateserver:3.005\(191112\):*:*:*:*:*:*:*
- cpe:2.3:a:selea:carplateserver:3.005\(191206\):*:*:*:*:*:*:*
- cpe:2.3:a:selea:carplateserver:3.100\(200225\):*:*:*:*:*:*:*
- cpe:2.3:a:selea:carplateserver:4.013\(201105\):*:*:*:*:*:*:*
- cpe:2.3:o:selea:izero_box_full_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:selea:izero_column_entry\/8_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:selea:izero_column_full\/8_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:selea:targa_504_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:selea:targa_512_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:selea:targa_704_ilb_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:selea:targa_704_tkm_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:selea:targa_710_inox_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:selea:targa_750_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:selea:targa_805_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:selea:targa_semplice_firmware:-:*:*:*:*:*:*:*
(expand)+ 1 more
- (no CPE)
- (no CPE)range: Model: iZero
Patches
Vulnerability mechanics
References
5- www.exploit-db.com/exploits/49454nvdExploit
- www.vulncheck.com/advisories/selea-targa-ip-camera-stored-cross-site-scripting-via-files-listnvdThird Party Advisory
- www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5614.phpnvdThird Party Advisory
- www.selea.comnvdProduct
- www.selea.com/product/nvdProduct
News mentions
0No linked articles in our index yet.