{"vulnerability": "CVE-2021-31721", "sightings": [{"uuid": "7fcb11c1-6cd8-488c-824b-5c47a04f6447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31721", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/550", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPoC for exploiting CVE-2021-31721 : Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage.\nURL\uff1ahttps://github.com/AlAIAL90/CVE-2021-30704", "creation_timestamp": "2021-09-18T02:46:03.000000Z"}, {"uuid": "af236732-c7a8-4175-841b-bc2d3c6fb993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31721", "type": "seen", "source": "https://t.me/hacking_Attack/24009", "content": "Exploit Collector\nCloudron 6.2 Cross Site Scripting\n\n\nCloudron version 6.2 suffers from a cross site scripting vulnerability.\n\nMD5 | c00528f7f6eb16cf927d4aff14fb5ee8\n\nDownload\n\n\n\n# Exploit Title: Cloudron 6.2 - Cross Site Scripting (Reflected)\n# Google Dork: N/A\n# Date: 10.06.2021\n# Exploit Author: Ak\u0131ner K\u0131sa\n# Vendor Homepage: https://cloudron.io\n# Software Link: https://www.cloudron.io/get.html\n# Version: 6.3 >\n# Tested on: Demo / Localhost\n# CVE : CVE-2021-31721\n\nProof of Concept:\n\n1. Go to https://my.demo.cloudron.io/login.html?returnTo=\n\n\n2. Type your payload after returnTo=\n\n3. Fill in the login information and press the sign in button.\n\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:22.671101Z"}, {"uuid": "113776e6-9e1a-4384-8635-c32ceb4bd75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31721", "type": "seen", "source": "https://t.me/hacking_Attack/24009", "content": "Exploit Collector\nCloudron 6.2 Cross Site Scripting\n\n\nCloudron version 6.2 suffers from a cross site scripting vulnerability.\n\nMD5 | c00528f7f6eb16cf927d4aff14fb5ee8\n\nDownload\n\n\n\n# Exploit Title: Cloudron 6.2 - Cross Site Scripting (Reflected)\n# Google Dork: N/A\n# Date: 10.06.2021\n# Exploit Author: Ak\u0131ner K\u0131sa\n# Vendor Homepage: https://cloudron.io\n# Software Link: https://www.cloudron.io/get.html\n# Version: 6.3 >\n# Tested on: Demo / Localhost\n# CVE : CVE-2021-31721\n\nProof of Concept:\n\n1. Go to https://my.demo.cloudron.io/login.html?returnTo=\n\n\n2. Type your payload after returnTo=\n\n3. Fill in the login information and press the sign in button.\n\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:02:52.424510Z"}, {"uuid": "ef7333c2-3489-40d7-a11d-49b1166495ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31721", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/24009", "content": "Exploit Collector\nCloudron 6.2 Cross Site Scripting\n\n\nCloudron version 6.2 suffers from a cross site scripting vulnerability.\n\nMD5 | c00528f7f6eb16cf927d4aff14fb5ee8\n\nDownload\n\n\n\n# Exploit Title: Cloudron 6.2 - Cross Site Scripting (Reflected)\n# Google Dork: N/A\n# Date: 10.06.2021\n# Exploit Author: Ak\u0131ner K\u0131sa\n# Vendor Homepage: https://cloudron.io\n# Software Link: https://www.cloudron.io/get.html\n# Version: 6.3 >\n# Tested on: Demo / Localhost\n# CVE : CVE-2021-31721\n\nProof of Concept:\n\n1. Go to https://my.demo.cloudron.io/login.html?returnTo=\n\n\n2. Type your payload after returnTo=\n\n3. Fill in the login information and press the sign in button.\n\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-07T15:00:06.340680Z"}, {"uuid": "a3f23e18-6418-452d-b36f-940a7deb294a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31721", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/24009", "content": "Exploit Collector\nCloudron 6.2 Cross Site Scripting\n\n\nCloudron version 6.2 suffers from a cross site scripting vulnerability.\n\nMD5 | c00528f7f6eb16cf927d4aff14fb5ee8\n\nDownload\n\n\n\n# Exploit Title: Cloudron 6.2 - Cross Site Scripting (Reflected)\n# Google Dork: N/A\n# Date: 10.06.2021\n# Exploit Author: Ak\u0131ner K\u0131sa\n# Vendor Homepage: https://cloudron.io\n# Software Link: https://www.cloudron.io/get.html\n# Version: 6.3 >\n# Tested on: Demo / Localhost\n# CVE : CVE-2021-31721\n\nProof of Concept:\n\n1. Go to https://my.demo.cloudron.io/login.html?returnTo=\n\n\n2. Type your payload after returnTo=\n\n3. Fill in the login information and press the sign in button.\n\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-08T00:00:41.902508Z"}]}