Selea Targa IP Camera Stored Cross-Site Scripting via Files List
Priority MEDIUM 56CWE-79Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- Passive
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-79.
Summary
Selea Targa IP OCR-ANPR Camera contains a stored cross-site scripting vulnerability in the 'files_list' parameter that allows attackers to inject malicious HTML and script code. Attackers can send a POST request to /cgi-bin/get_file.php with crafted payload to execute arbitrary scripts in victim's browser session.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00297 22nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Selea | Selea Targa IP OCR-ANPR Camera | Model: iZero; Firmware: BLD201113005214; CPS: 4.013(201105) | — | No fix listed | CNA |
- Selea Targa IP OCR-ANPR Camera VendorSelea Affected Model: iZero; Firmware: BLD201113005214; CPS: 4.013(201105) Fixed in — No fix listed CNA
CPE configurations NVD · 26
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:selea:izero_box_full_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:izero_box_full:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:izero_column_entry\/8_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:izero_column_entry\/8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:izero_column_full\/8_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:izero_column_full\/8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:targa_504_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_504:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:targa_512_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_512:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
- cpe:2.3:o:selea:izero_box_full_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:izero_box_full:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:izero_column_entry\/8_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:izero_column_entry\/8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:izero_column_full\/8_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:izero_column_full\/8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:targa_504_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_504:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:targa_512_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_512:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
Show 16 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:selea:targa_704_ilb_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_704_ilb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:targa_704_tkm_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_704_tkm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:targa_710_inox_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_710_inox:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:targa_750_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_750:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:targa_805_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_805:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:targa_semplice_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_semplice:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:a:selea:carplateserver:3.005\(191112\):*:*:*:*:*:*:* | 3.005(191112) | Vulnerable | Selea |
| cpe:2.3:a:selea:carplateserver:3.005\(191206\):*:*:*:*:*:*:* | 3.005(191206) | Vulnerable | Selea |
| cpe:2.3:a:selea:carplateserver:3.100\(200225\):*:*:*:*:*:*:* | 3.100(200225) | Vulnerable | Selea |
| cpe:2.3:a:selea:carplateserver:4.013\(201105\):*:*:*:*:*:*:* | 4.013(201105) | Vulnerable | Selea |
- cpe:2.3:o:selea:targa_704_ilb_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_704_ilb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:targa_704_tkm_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_704_tkm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:targa_710_inox_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_710_inox:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:targa_750_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:targa_805_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_805:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:targa_semplice_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_semplice:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:a:selea:carplateserver:3.005\(191112\):*:*:*:*:*:*:* Versions 3.005(191112) Vulnerable ·Selea
- cpe:2.3:a:selea:carplateserver:3.005\(191206\):*:*:*:*:*:*:* Versions 3.005(191206) Vulnerable ·Selea
- cpe:2.3:a:selea:carplateserver:3.100\(200225\):*:*:*:*:*:*:* Versions 3.100(200225) Vulnerable ·Selea
- cpe:2.3:a:selea:carplateserver:4.013\(201105\):*:*:*:*:*:*:* Versions 4.013(201105) Vulnerable ·Selea
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-47729
- 2026-10-03 Alias added: GHSA-56x4-vcv9-c6cw
References
More Selea Carplateserver vulnerabilities
- TI-2021-22348 Selea Targa IP Camera Developer Backdoor Configuration Overwrite CVSS 4.0CRITICAL 9.3
- TI-2021-22345 Selea Targa IP Camera Remote Code Execution via Utils CVSS 4.0CRITICAL 9.3
- TI-2021-22347 Selea Targa IP Camera Cross-Site Request Forgery via Admin Creation CVSS 4.0HIGH 8.5
- TI-2021-22344 Selea Targa IP Camera Unauthenticated Stream Disclosure CVSS 4.0HIGH 8.7
Sources
- CVE-2021-47729 · CVE Program
- CVE-2021-47729 · NVD
- FIRST EPSS
- GHSA-56x4-vcv9-c6cw · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences