CVE

CVE-2021-37216

6.1

CVSSmedium

Exploitable remotely over the internet · no authentication required · user interaction needed.

Description

QSAN Storage Manager header page parameters does not filter special characters. Remote attackers can inject JavaScript without logging in and launch reflected XSS attacks to access and modify specific data.

Attack Vector

Network

Privileges Req.

None

User Interaction

Required

storage manager xn8008tstorage manager xn8024r

Updated Oct 24, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

CVE-2021-37216 Scanner

CVE-2021-37216 scanner - Cross-Site Scripting (XSS) vulnerability in QSAN Storage Manager XN8008T

Used 3k times · 3.4k assets checked · url

Scanner page →Run scanner

CVE history: storage manager xn8008t

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →