CVE-2021-47729

🗓️ 09 Dec 2025 20:45:17Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 17 Views🌐 WEB

Stored cross-site scripting in Selea Targa IP Camera via files_list enables script execution.

Reporter	Title	Published	Views	Family All 8
CNNVD	Selea Targa IP OCR-ANPR Camera 跨站脚本漏洞	9 Dec 202500:00	–	cnnvd
Cvelist	CVE-2021-47729 Selea Targa IP Camera Stored Cross-Site Scripting via Files List	9 Dec 202520:45	–	cvelist
EUVD	EUVD-2021-34741	9 Dec 202521:31	–	euvd
NVD	CVE-2021-47729	9 Dec 202521:15	–	nvd
OSV	CVE-2021-47729	9 Dec 202521:15	–	osv
Positive Technologies	PT-2025-50248	9 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2021-47729	10 Dec 202521:16	–	redhatcve
Vulnrichment	CVE-2021-47729 Selea Targa IP Camera Stored Cross-Site Scripting via Files List	9 Dec 202520:45	–	vulnrichment

NVD

Vulners

Node

AND

selea izero_box_full_firmwareMatch-

selea izero_box_fullMatch-

Node

AND

selea izero_column_entry/8_firmwareMatch-

selea izero_column_entry/8Match-

Node

AND

selea izero_column_full/8_firmwareMatch-

selea izero_column_full/8Match-

Node

AND

selea targa_504_firmwareMatch-

selea targa_504Match-

Node

AND

selea targa_512_firmwareMatch-

selea targa_512Match-

Node

AND

selea targa_704_ilb_firmwareMatch-

selea targa_704_ilbMatch-

Node

AND

selea targa_704_tkm_firmwareMatch-

selea targa_704_tkmMatch-

Node

AND

selea targa_710_inox_firmwareMatch-

selea targa_710_inoxMatch-

Node

AND

selea targa_750_firmwareMatch-

selea targa_750Match-

Node

AND

selea targa_805_firmwareMatch-

selea targa_805Match-

Node

AND

selea targa_semplice_firmwareMatch-

selea targa_sempliceMatch-

Node

selea carplateserverMatch3.005(191112)

selea carplateserverMatch3.005(191206)

selea carplateserverMatch3.100(200225)

selea carplateserverMatch4.013(201105)

[
  {
    "defaultStatus": "unaffected",
    "product": "Selea Targa IP OCR-ANPR Camera",
    "vendor": "selea s.r.l.",
    "versions": [
      {
        "status": "affected",
        "version": "Model: iZero"
      },
      {
        "status": "affected",
        "version": "Firmware: BLD201113005214"
      },
      {
        "status": "affected",
        "version": "CPS: 4.013(201105)"
      }
    ]
  }
]

Source	Link
vulncheck	www.vulncheck.com/advisories/selea-targa-ip-camera-stored-cross-site-scripting-via-files-list
zeroscience	www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5614.php
selea	www.selea.com/
exploit-db	www.exploit-db.com/exploits/49454
selea	www.selea.com/product/

Parameter	Position	Path	Description	CWE
files_list	request body	/cgi-bin/get_file.php	Stored cross-site scripting via files_list in POST to /cgi-bin/get_file.php allowing injection of malicious HTML/script in victim's browser session.	CWE-79

17 Jun 2026 04:18Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.4

CVSS 45.1

EPSS0.00259

SSVC

CWE-79