CVE-2021-3151: I-Doit

Medium severity, CVSS 5.4. EPSS: 1.2% chance of exploitation in the next 30 days.

i-doit before 1.16.0 is affected by Stored Cross-Site Scripting (XSS) issues that could allow remote authenticated attackers to inject arbitrary web script or HTML via C__MONITORING__CONFIG__TITLE, SM2__C__MONITORING__CONFIG__TITLE, C__MONITORING__CONFIG__PATH, SM2__C__MONITORING__CONFIG__PATH, C__MONITORING__CONFIG__ADDRESS, or SM2__C__MONITORING__CONFIG__ADDRESS.

Affected products

• I-Doit I-Doit: before 1.16.0 (fixed in 1.16.0)

Published 2021-02-27. Last modified 2026-06-17.