CVE-2021-29661

5.4 mediumEPSS 0.6%

Medium (5.4) in softing opc toolbox. EPSS 0.6% chance of exploitation in the next 30 days.

Softing AG OPC Toolbox through 4.10.1.13035 allows /en/diag_values.html Stored XSS via the ITEMLISTVALUES##ITEMID parameter, resulting in JavaScript payload injection into the trace file. This payload will then be triggered every time an authenticated user browses the page containing it.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-04-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

softing:opc_toolbox

References

https://www.gruppotim.it/redteam
https://www.gruppotim.it/redteam

Check your stack JSON