CVE-2021-35503: Afian Filerun

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Afian FileRun 2021.03.26 allows stored XSS via an HTTP X-Forwarded-For header that is mishandled when rendering Activity Logs.

Affected products

• Afian Filerun: version 2021.03.26 only

Published 2021-10-05. Last modified 2026-07-05.