CVE-2021-41943: Logrhythm

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Logrhythm Web Console 7.4.9 allows for HTML tag injection through Contextualize Action -> Create a new Contextualize Action -> Inject your HTML tag in the name field.

Affected products

• Logrhythm Logrhythm: version 7.4.9 only

Published 2022-12-13. Last modified 2026-06-17.