CVE-2021-27310

MEDIUM NUCLEI

Clansphere CMS 2011.4 - Unauthenticated Reflected Cross-Site Scripting via Language Parameter

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2021-27310 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Description

Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "language" parameter.

Nuclei Templates (1)

Clansphere CMS 2011.4 - Cross-Site Scripting
MEDIUMby alph4byt3

References (1)

Core 1

Scores

CVSS v3 6.1
EPSS 0.0282
EPSS Percentile 84.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
csphere/clansphere 2011.4
Published Mar 23, 2021
Tracked Since Feb 18, 2026