CVE-2021-47906

MEDIUM

BloofoxCMS 0.5.2.1 - 'text' Stored Cross Site Scripting

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2021-47906 has a selected CVSS score of 5.1 (medium); EIP currently links 1 catalogued exploit.

Description

BloofoxCMS 0.5.2.1 contains a stored cross-site scripting vulnerability in the articles text parameter that allows authenticated attackers to inject malicious scripts. Attackers can insert malicious javascript payloads in the text field to execute scripts and potentially steal authenticated users' cookies.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 23, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

BloofoxCMS

Browse BloofoxCMS / BloofoxCMS
CVE List0.5.1.0 - 0.5.2.1affected

Proofs of concept

1

Catalogued exploits

ExploitDBBloofoxCMS 0.5.2.1 - 'text' Stored Cross Site ScriptingExploitDB exploitby LiPeiYiNot analyzed1 file
ExploitDB
PoC details

References

5