Cloudron 6.2 Cross-Site Scripting

In Cloudron 6.2, the returnTo parameter on the login page is vulnerable to cross-site scripting. id: CVE-2021-40868 info: name: Cloudron 6.2 Cross-Site Scripting author: daffainfo severity: medium description: In Cloudron 6.2, the returnTo parameter on the login page is vulnerable to cross-site...

CVE-2026-79363

Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting XSS vulnerability in the Branding Footer feature. An authenticated administrator can store crafted HTML containing JavaScript event handlers in the Footer setting. The stored value is rendered without sufficient sanitization on the publ...

CVE-2026-79363

Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting XSS vulnerability in the Branding Footer feature. An authenticated administrator can store crafted HTML containing JavaScript event handlers in the Footer setting. The stored value is rendered without sufficient sanitization on the publ...

EUVD-2026-95789

Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting XSS vulnerability in the Branding Footer feature. An authenticated administrator can store crafted HTML containing JavaScript event handlers in the Footer setting. The stored value is rendered without sufficient sanitization on the publ...

PT-2026-108911

Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting XSS vulnerability in the Branding Footer feature. An authenticated administrator can store crafted HTML containing JavaScript event handlers in the Footer setting. The stored value is rendered without sufficient sanitization on the publ...

CVE-2026-79363

Cloudron versions 9.1.7 and 9.2 are vulnerable to a stored cross-site scripting (XSS) flaw in the Branding Footer feature. An authenticated administrator can inject crafted HTML containing JavaScript event handlers into the Footer setting. Because these values are rendered without sufficient sani...

WS-2020-0437

In cloudron-surfer in versions 5.5.0 to 5.10.2 is vulnerable to enial of service via LDAP Injection...

cloudron-manifestformat (>=5.0.0, <=5.10.1) potentially affected by CVE-2020-7737 via safetydance (1.0.0)

safetydance NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on safetydance and may be impacted: - cloudron-manifestformat =5.0.0, =5.10.1 Source cves: CVE-2020-7737 Source advisory: OSV:GHSA-6M85-WVCR-PGW3...

Cloudron 6.2 Cross Site Scripting

Exploit Title: Cloudron 6.2 - 'returnTo ' Cross Site Scripting Reflected Date: 10.06.2021 Exploit Author: Akıner Kısa Vendor Homepage: https://cloudron.io Software Link: https://www.cloudron.io/get.html Version: 6.3 CVE : CVE-2021-40868 Proof of Concept: 1. Go to...

Cloudron 6.2 - 'returnTo ' Cross Site Scripting (Reflected)

Exploit Title: Cloudron 6.2 - 'returnTo ' Cross Site Scripting Reflected Date: 10.06.2021 Exploit Author: Akıner Kısa Vendor Homepage: https://cloudron.io Software Link: https://www.cloudron.io/get.html Version: 6.3 CVE : CVE-2021-40868 Proof of Concept: 1. Go to...

CVE-2021-40868

In Cloudron 6.2, the returnTo parameter on the login page is vulnerable to Reflected XSS...

CVE-2021-40868

In Cloudron 6.2, the returnTo parameter on the login page is vulnerable to Reflected XSS...

Cross site scripting

In Cloudron 6.2, the returnTo parameter on the login page is vulnerable to Reflected XSS...

CVE-2021-40868

In Cloudron 6.2, the returnTo parameter on the login page is vulnerable to Reflected XSS...

CVE-2021-40868

In Cloudron 6.2, the returnTo parameter on the login page is vulnerable to Reflected XSS...

CVE-2021-40868

CVE-2021-40868 affects Cloudron 6.2, where the login page’s returnTo parameter is vulnerable to reflected Cross-Site Scripting (XSS). The issue arises in the handling of the returnTo input on the login page, enabling execution of arbitrary JavaScript in the victim’s browser. Public sources descri...

CVE-2021-40868: Improper Neutralization of Input During Web Page Generation

In Cloudron 6.2, the returnTo parameter on the login page is vulnerable to Reflected XSS...

PT-2021-22994

Name of the Vulnerable Software and Affected Versions Cloudron version 6.2 Description The issue concerns a Reflected XSS vulnerability related to the returnTo parameter on the login page. This allows for potential malicious script injection, which can be executed when a user is redirected to the...

Cloudron 跨站脚本漏洞

Cloudron is a platform from Cloudron, Inc. for installing, managing, and securing web applications on servers. A security vulnerability exists in Cloudron 6.2 that stems from insufficient validation of the returnTo parameter input on the login page...

Cloudron 6.2 Cross Site Scripting

Exploit Title: Cloudron 6.2 - Cross Site Scripting Reflected Google Dork: N/A Date: 10.06.2021 Exploit Author: Akıner Kısa Vendor Homepage: https://cloudron.io Software Link: https://www.cloudron.io/get.html Version: 6.3 Tested on: Demo / Localhost CVE : CVE-2021-31721 Proof of Concept: 1. Go to...