{"vulnerability": "cve-2021-38138", "sightings": [{"uuid": "0102b9fe-d192-4201-b2b8-94907b28e4d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38138", "type": "seen", "source": "https://t.me/cibsecurity/26887", "content": "\u203c CVE-2021-38138 \u203c\n\nOneNav beta 0.9.12 allows XSS via the Add Link feature. NOTE: the vendor's position is that there intentionally is not any XSS protection at present, because the attack risk is largely limited to a compromised account; however, XSS protection is planned for a future release.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-05T20:31:24.000000Z"}, {"uuid": "b1600cec-1623-4d17-989d-57aff8737257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-38138", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/19572", "content": "", "creation_timestamp": "2026-09-07T21:00:05.551630Z"}, {"uuid": "a9c0b9d7-817a-4680-ace1-096fdbf42206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-38138", "type": "seen", "source": "https://t.me/hacking_Attack/19572", "content": "", "creation_timestamp": "2026-09-01T20:02:29.865338Z"}]}