{"vulnerability": "CVE-2021-40868", "sightings": [{"uuid": "41a09bc4-99fe-47da-ba4e-0d6940a703df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40868", "type": "seen", "source": "https://t.me/cibsecurity/29192", "content": "\u203c CVE-2021-40868 \u203c\n\nIn Cloudron 6.2, the returnTo parameter on the login page is vulnerable to Reflected XSS.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-21T20:28:00.000000Z"}, {"uuid": "c41b3ba4-7566-4ac0-9564-9463ed8038e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40868", "type": "seen", "source": "https://t.me/hacking_Attack/24536", "content": "Exploit Collector\nCloudron 6.2 Cross Site Scripting\n\n\nCloudron version 6.2 suffers from a cross site scripting vulnerability.\n\nMD5 | 04e5263b2aba1564e3b29ea91dd03411\n\nDownload\n\n\n\n# Exploit Title: Cloudron 6.2 - 'returnTo ' Cross Site Scripting (Reflected)\n# Date: 10.06.2021\n# Exploit Author: Ak\u0131ner K\u0131sa\n# Vendor Homepage: https://cloudron.io\n# Software Link: https://www.cloudron.io/get.html\n# Version: 6.3 >\n# CVE : CVE-2021-40868\n\n\nProof of Concept:\n\n1. Go to https://localhost/login.html?returnTo=\n2. Type your payload after returnTo=\n3. Fill in the login information and press the sign in button.\n\n\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:21.216757Z"}, {"uuid": "f775bf3a-e6d4-456b-9f39-42e0898ce4da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40868", "type": "seen", "source": "https://t.me/hacking_Attack/24536", "content": "Exploit Collector\nCloudron 6.2 Cross Site Scripting\n\n\nCloudron version 6.2 suffers from a cross site scripting vulnerability.\n\nMD5 | 04e5263b2aba1564e3b29ea91dd03411\n\nDownload\n\n\n\n# Exploit Title: Cloudron 6.2 - 'returnTo ' Cross Site Scripting (Reflected)\n# Date: 10.06.2021\n# Exploit Author: Ak\u0131ner K\u0131sa\n# Vendor Homepage: https://cloudron.io\n# Software Link: https://www.cloudron.io/get.html\n# Version: 6.3 >\n# CVE : CVE-2021-40868\n\n\nProof of Concept:\n\n1. Go to https://localhost/login.html?returnTo=\n2. Type your payload after returnTo=\n3. Fill in the login information and press the sign in button.\n\n\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:02:50.508852Z"}]}