CVE-2021-42552: Archivista Archivistabox

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Cross-site Scripting (XSS) vulnerability in ArchivistaBox webclient allows an attacker to craft a malicious link, executing JavaScript in the context of a victim's browser. This issue affects all ArchivistaBox versions prior to 2022/I.

Affected products

• Archivista Archivistabox: before 2022\/i (fixed in 2022\/i)

Published 2022-03-16. Last modified 2026-06-17.