CVE-2021-26903 PoC — LMA ISIDA Retriever 跨站脚本漏洞

Source

https://github.com/Security-AVS/CVE-2021-26903

Associated Vulnerability

Title: LMA ISIDA Retriever 跨站脚本漏洞 (CVE-2021-26903)
Description:LMA ISIDA Retriever 5.2 is vulnerable to XSS via query['text'].

Description

ISIDA RETRIEVER v5.2" Reflected XSS

Readme

# CVE-2021-26903
ISIDA RETRIEVER v5.2" Reflected XSS

**[Suggested description]**:  "ISIDA RETRIEVER v5.2" Reflected XSS.

**[Vulnerable functionality]**: ISIDA RETRIEVER Platform is vulnerable to Reflected XSS.

**[Vulnerable Parameter]**: query['text']

**[Discovered]**: Alexander Semenenko

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →