Security Advisory

CVE-2021-47725

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-31 18:40:52
Last updated 2026-01-02 20:57:54
Assigner VulnCheck
State PUBLISHED

Description

STVS ProVision 5.9.10 contains a cross-site scripting vulnerability in the files POST parameter that allows authenticated attackers to inject arbitrary HTML code. Attackers can exploit the unvalidated input to execute malicious scripts within a users browser session in the context of the affected site.