CVE-2021-42329

5.4 mediumEPSS 0.6%

Medium (5.4) in xinheinformation xinhe teaching platform system. EPSS 0.6% chance of exploitation in the next 30 days.

The “List_Add” function of message board of ShinHer StudyOnline System does not filter special characters in the title parameter. After logging in with user’s privilege, remote attackers can inject JavaScript and execute stored XSS attacks.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-10-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

xinheinformation:xinhe_teaching_platform_system

References

https://www.twcert.org.tw/tw/cp-132-5199-61238-1.html
https://www.twcert.org.tw/tw/cp-132-5199-61238-1.html

Check your stack JSON