CVE-2021-35506

MediumCVSS 6.1

Published: 05/10/2021(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.71%

49th percentile - higher than 49% of all known CVEs

Summary

An XSS vulnerability in Afian FileRun 2021.03.26 allows an attacker to inject malicious scripts when an administrator uses the HTML Editor to preview or edit a crafted document.

Risk Assessment

The risk includes session hijacking, data theft, or unauthorized actions performed under the administrator's privileges.

Recommendation

Immediately update to the latest version of Afian FileRun and avoid opening suspicious documents in the HTML Editor.

Original NVD description (English source)

Afian FileRun 2021.03.26 allows XSS when an administrator encounters a crafted document during use of the HTML Editor for a preview or edit action.