CVE-2021-47729

MEDIUM 5.4CVE-2021-47729 · Published 09/12/2025 · updated 17/06/2026

In short

CVE-2021-47729 is a MEDIUM (CVSS 5.4) vulnerability affecting carplateserver (selea).
Chance of exploitation in the next 30 days (EPSS): 0.30%, higher than 22.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
carplateserver selea	`= 3.005(191112)= 3.005(191206)= 3.100(200225)= 4.013(201105)`	No fix yet

Description

Selea Targa IP OCR-ANPR Camera contains a stored cross-site scripting vulnerability in the 'files_list' parameter that allows attackers to inject malicious HTML and script code. Attackers can send a POST request to /cgi-bin/get_file.php with crafted payload to execute arbitrary scripts in victim's browser session.

References

exploit-db.com/exploits/49454 · Exploit
selea.com · Product
selea.com/product · Product
vulncheck.com/advisories/selea-targa-ip-camera-stored-cross-site-scripting-via-files-list · Third Party Advisory
zeroscience.mk/en/vulnerabilities/ZSL-2021-5614.php · Third Party Advisory

More vulnerabilities in carplateserver

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

carplateserver

selea

= 3.005(191112)= 3.005(191206)= 3.100(200225)= 4.013(201105)

No fix yet

Description

More vulnerabilities in carplateserver

See all →