CVE-2021-33904: Accela Civic Platform

Medium severity, CVSS 6.1. EPSS: 10% chance of exploitation in the next 30 days.

In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS. NOTE: The vendor states "there are configurable security flags and we are unable to reproduce them with the available information.

Affected products

• Accela Civic Platform: up to and including 21.1

Published 2021-06-07. Last modified 2026-06-17.