{"metadata": {"vulnerability": "cve-2021-25968", "count": 18, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 12}}, "data": [{"timestamp": "2021-01-22T00:00:00Z", "date_only": false, "value": "2021-01-22T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2021-25968", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-10-19T08:15:11Z", "date_only": false, "value": "2021-10-19T08:15:11.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Mend", "record": "cve-2021-25968", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-10-19T08:15:12Z", "date_only": false, "value": "2021-10-19T08:15:12.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-25968", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-10-19T09:15:00Z", "date_only": false, "value": "2021-10-19T09:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P799-QJP6-H93P", "record": "GHSA-P799-QJP6-H93P", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-10-19T09:15:00Z", "date_only": false, "value": "2021-10-19T09:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-25968", "record": "GSD-2021-25968", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-10-19T09:15:07.853Z", "date_only": false, "value": "2021-10-19T09:15:07.853", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-25968", "record": "FKIE_CVE-2021-25968", "field": "published"}, {"timestamp": "2021-10-19T15:42:53Z", "date_only": false, "value": "2021-10-19T15:42:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/30747", "record": "CVE-2021-25968", "field": "creation_timestamp", "uuid": "9ba2de09-c2e6-423c-8edc-4815b2016458", "content": "\u203c\ufe0f CVE-2021-25968 \u203c\ufe0f\n\nIn OpenCMS, versions 10.5.0 to 11.0.2 are affected by a stored XSS vulnerability that allows low privileged application users to store malicious scripts in the Sitemap functionality. These scripts are executed in a victim\u00e2\u20ac\u2122s browser when they open the page containing the vulnerable field.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/30747"}, {"timestamp": "2021-10-21T23:39:00Z", "date_only": false, "value": "2021-10-21T23:39Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-25968", "record": "GSD-2021-25968", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-24T22:28:49Z", "date_only": false, "value": "2022-05-24T22:28:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P799-QJP6-H93P", "record": "GHSA-P799-QJP6-H93P", "field": "published"}, {"timestamp": "2022-05-24T22:28:49Z", "date_only": false, "value": "2022-05-24T22:28:49Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P799-QJP6-H93P", "record": "GHSA-P799-QJP6-H93P", "field": "modified"}, {"timestamp": "2023-12-13T01:23:21.624Z", "date_only": false, "value": "2023-12-13T01:23:21.624996Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-25968", "record": "GSD-2021-25968", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T20:19:18.982Z", "date_only": false, "value": "2024-08-03T20:19:18.982Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2021-25968", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-30T16:00:30.314Z", "date_only": false, "value": "2025-04-30T16:00:30.314377Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-25968", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-30T16:00:30.314Z", "date_only": false, "value": "2025-04-30T16:00:30.314377Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-25968", "record": "FKIE_CVE-2021-25968", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-30T16:00:50.132Z", "date_only": false, "value": "2025-04-30T16:00:50.132Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2021-25968", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-30T16:00:50.132Z", "date_only": false, "value": "2025-04-30T16:00:50.132Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-25968", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-30T16:14:09Z", "date_only": false, "value": "2025-04-30T16:14:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14079", "record": "CVE-2021-25968", "field": "creation_timestamp", "uuid": "912b4770-bf9e-4c34-9259-4846ee117873", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2021-25968\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: In \u201cOpenCMS\u201d, versions 10.5.0 to 11.0.2 are affected by a stored XSS vulnerability that allows low privileged application users to store malicious scripts in the Sitemap functionality. These scripts are executed in a victim\u2019s browser when they open the page containing the vulnerable field.\n\ud83d\udccf Published: 2021-10-19T08:15:12.000Z\n\ud83d\udccf Modified: 2025-04-30T16:00:50.132Z\n\ud83d\udd17 References:\n1. https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25968\n2. https://github.com/alkacon/mercury-template/commit/800945f5d02346c633c7aef9f5d596d7dedc8fb5", "url": "https://t.me/DarkWebInformer_CVEAlerts/14079"}, {"timestamp": "2026-06-17T03:42:41.840Z", "date_only": false, "value": "2026-06-17T03:42:41.840", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-25968", "record": "FKIE_CVE-2021-25968", "field": "lastModified"}]}