CVE-2021-20628

—

CVSS 3.1

6.1 medium

EPSS

<1%p55

Published

Mar 18, 2021 (Mar 18, 2021)

Modified

Jun 17, 2026

Description

Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors. Note that this vulnerability occurs only when using Mozilla Firefox.

Vendors: cybozu
Products: office
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.