CVSS v3
9.6
CRITICAL
EPSS Score
86.4%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Erxes, an experience operating system (XOS) with a set of plugins, is vulnerable to cross-site scripting in versions 0.22.3 and prior. This results in client-side code execution. The victim must follow a malicious link or be redirected there from malicious web site. There are no known patches.
Erxes, an experience operating system (XOS) with a set of plugins, is vulnerable to cross-site scripting in versions 0.22.3 and prior. This results in client-side code execution. The victim must follow a malicious link or be redirected there from malicious web site. There are no known patches.
Active exploitation of CVE-2021-32853 has not been confirmed. The EPSS score is 86.4%, indicating the estimated probability of exploitation in the next 30 days.
CVE-2021-32853 has a CVSS v3 base score of 9.6 (CRITICAL severity).
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
Ranked by exploit probability (EPSS).