CVE

CVE-2021-31537

6.1

CVSS

Description

SIS SIS-REWE Go before 7.7 SP17 allows XSS: rewe/prod/web/index.php (affected parameters are config, version, win, db, pwd, and user) and /rewe/prod/web/rewe_go_check.php (version and all other parameters).

Attack Vector

Privileges Req.

User Interaction

Updated Oct 24, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~15 seconds

CVE-2021-31537 Scanner

Detects 'Cross-Site Scripting (XSS)' vulnerability in SIS-REWE Go affects v. before 7.7 SP17.

Used 2.7k times · 3.4k assets checked · url

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →