# CVEs published 2021-08-15

3 CVEs were published on August 15, 2021: 1 critical, 0 high. Days are UTC.

- [CVE-2021-25955](https://cve.now/CVE-2021-25955.md): Stored XSS in “Dolibarr” leads to privilege escalation (CVSS 9.0, dolibarr · dolibarr/dolibarr)
- [CVE-2021-38699](https://cve.now/CVE-2021-38699.md): TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/system\_logs. (no CVSS)
- [CVE-2021-37326](https://cve.now/CVE-2021-37326.md): NetSarang Xshell 7 before Build 0077 includes unintended code strings in paste operations. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-08-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.