CVE-2021-43725
MEDIUM NUCLEISpotweb <1.5.1 - XSS
Title source: llmDescription
There is a Cross Site Scripting (XSS) vulnerability in SpotPage_login.php of Spotweb 1.5.1 and below, which allows remote attackers to inject arbitrary web script or HTML via the data[performredirect] parameter.
Nuclei Templates (1)
Spotweb <= 1.5.1 - Cross Site Scripting (Reflected)
MEDIUMVERIFIEDby theamanrawat
Shodan:
title:"SpotWeb - overview" || http.title:"spotweb - overview"
FOFA:
title="spotweb - overview"
Scores
CVSS v3
6.1
EPSS
0.0108
EPSS Percentile
77.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (1)
spotweb_project/spotweb
< 1.5.1
Published
Mar 28, 2022
Tracked Since
Feb 18, 2026