{"vulnerability": "CVE-2021-35976", "sightings": [{"uuid": "620f29d0-2445-48c4-a95e-620b6e53775b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35976", "type": "seen", "source": "https://t.me/cibsecurity/28660", "content": "\u203c CVE-2021-35976 \u203c\n\nThe feature to preview a website in Plesk Obsidian 18.0.0 through 18.0.32 on Linux is vulnerable to reflected XSS via the /plesk-site-preview/ PATH, aka PFSI-62467. The attacker could execute JavaScript code in the victim\u00e2\u20ac\u2122s browser by using the link to preview sites hosted on the server. Authentication is not required to exploit the vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-10T16:30:38.000000Z"}]}