{"id":"CVE-2021-4035","url":"https://www.cyber-defence.io/tools/cve/CVE-2021-4035","generatedAt":"2026-10-27T17:39:13.784Z","title":"A stored cross site scripting have been identified at the comments in the report creation due to an obsolote version of tinymce editor.","description":"A stored cross site scripting have been identified at the comments in the report creation due to an obsolote version of tinymce editor. In order to exploit this vulnerability, the attackers needs an account with enough privileges to view and edit reports.","published":"2022-02-11T18:15:11.000Z","lastModified":"2026-06-17T04:18:56.000Z","status":"Modified","sourceIdentifier":"cve-coordination@incibe.es","cvss":{"version":"3.1","score":4.8,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},"cwe":["CWE-79"],"affected":["wocu-monitoring/wocu monitoring"],"epss":{"score":0.00447,"percentile":0.38667,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.45%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/wocu-monitoring-stored-cross-site-scripting-xss","source":"cve-coordination@incibe.es"},{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/wocu-monitoring-stored-cross-site-scripting-xss","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2021-4035","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}