\" to successfully execute the JavaScript payload present in the \"ref\" URL parameter.","inLanguage":"en-US","identifier":"CVE-2021-26247","datePublished":"2022-01-19T21:15:08.237","dateModified":"2026-06-17T03:43:00.093","about":{"@type":"Thing","name":"CVE-2021-26247","identifier":"CVE-2021-26247"},"isPartOf":{"@type":"WebSite","name":"GotRooted","url":"https://gotrooted.org/"},"publisher":{"@type":"Organization","name":"GotRooted","logo":{"@type":"ImageObject","url":"https://gotrooted.org/logo.png","width":640,"height":640}}},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://gotrooted.org/"},{"@type":"ListItem","position":2,"name":"cve","item":"https://gotrooted.org/cve"},{"@type":"ListItem","position":3,"name":"CVE 2021 26247","item":"https://gotrooted.org/cve/CVE-2021-26247"}]}]}

VULNERABILITY INTELLIGENCE

CVE-2021-26247

CVSS score6.1 MEDIUM
EPSS probability7.12%
CISA KEVNot currently listed
Published2022-01-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

As an unauthenticated remote user, visit "http://<CACTI_SERVER>/auth_changepassword.php?ref=<script>alert(1)</script>" to successfully execute the JavaScript payload present in the "ref" URL parameter.

Weakness classification

  • secalert@redhat.com: CWE-79
  • nvd@nist.gov: CWE-79

Primary references