CVE-2021-47729
Medium
Description
Selea Targa IP OCR-ANPR Camera contains a stored cross-site scripting vulnerability in the 'files_list' parameter that allows attackers to inject malicious HTML and script code. Attackers can send a POST request to /cgi-bin/get_file.php with crafted payload to execute arbitrary scripts in victim's browser session.
SeverityMedium
CVSS5.4
Exploit probability—
ProductSelea Targa 504 Firmware
PublishedDec 9, 2025
First seenDec 9, 2025
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| selea targa_504_firmware | No range specified | — |
| selea izero_box_full_firmware | No range specified | — |
| selea izero_column_entry\/8_firmware | No range specified | — |
| selea izero_column_full\/8_firmware | No range specified | — |
| selea targa_512_firmware | No range specified | — |
| selea targa_704_ilb_firmware | No range specified | — |
| selea targa_704_tkm_firmware | No range specified | — |
| selea targa_710_inox_firmware | No range specified | — |
| selea targa_750_firmware | No range specified | — |
| selea targa_805_firmware | No range specified | — |
| selea targa_semplice_firmware | No range specified | — |
| selea carplateserver | 3.005\(191112\), 3.005\(191206\), 3.100\(200225\), 4.013\(201105\) | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.