VULNERABILITY INTELLIGENCE
CVE-2021-47835
CVSS score7.2 HIGH
EPSS probability0.44%
CISA KEVNot currently listed
Published2026-01-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Description
Freeter 1.2.1 contains a persistent cross-site scripting vulnerability that allows attackers to store malicious payloads in custom widget titles and files. Attackers can craft malicious files with embedded scripts that execute when victims interact with the application, potentially enabling remote code execution.
Weakness classification
- disclosure@vulncheck.com: CWE-79