CVE-2026-2971

🗓️ 23 Feb 2026 04:32:08Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 6 Views🌐 WEB

CVE-2026-2971 affects Smart single sign on up to 2.1.1 login page; remote cross-site scripting.

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2026-2971	23 Feb 202604:32	–	attackerkb
CNNVD	Smart-SSO 代码注入漏洞	23 Feb 202600:00	–	cnnvd
Cvelist	CVE-2026-2971 a466350665 Smart-SSO Login login.html cross site scripting	23 Feb 202604:32	–	cvelist
NVD	CVE-2026-2971	23 Feb 202605:16	–	nvd
Positive Technologies	PT-2026-21497	23 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-2971	24 Feb 202607:30	–	redhatcve
Vulnrichment	CVE-2026-2971 a466350665 Smart-SSO Login login.html cross site scripting	23 Feb 202604:32	–	vulnrichment

NVD

Vulners

Node

a466350665 smart-ssoRange≤2.1.1

[
  {
    "vendor": "a466350665",
    "product": "Smart-SSO",
    "versions": [
      {
        "version": "2.1.0",
        "status": "affected"
      },
      {
        "version": "2.1.1",
        "status": "affected"
      }
    ],
    "modules": [
      "Login"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
notion	www.notion.so/Smart-SSO-Reflected-XSS-vulnerabilities-in-redirectUri-parameter-304ea92a3c41805a8223c4ba75831802

Parameter	Position	Path	Description	CWE
redirectUri	query param	smart-sso-server/src/main/resources/templates/login.html	Cross-site scripting via redirectUri parameter in the login template (Login component).	CWE-79, CWE-94

29 Apr 2026 01:00Current

3.7Low risk

Vulners AI Score3.7

CVSS 3.14.3 - 6.1

CVSS 25

CVSS 45.3

CVSS 34.3

EPSS0.00047

SSVC