The Hacker Newsinfo@thehackernews.com (The Hacker News)
CISA Adds Actively Exploited XSS Bug CVE-2021-26829 in OpenPLC ScadaBR to KEV
The article discusses the addition of the actively exploited XSS vulnerability, CVE-2021-26829, in OpenPLC ScadaBR to the Cybersecurity and Infrastructure Security Agency's (CISA) Known Exploited Vulnerabilities (KEV) catalog. This vulnerability poses significant risks as it can be exploited by attackers to execute malicious scripts in the context of a user's browser. The article emphasizes the importance of patching and securing systems against such vulnerabilities to prevent potential cyberattacks.