CVE-2021-20672

—

CVSS 3.1

6.1 medium

EPSS

<1%p59

Published

Mar 10, 2021 (Mar 10, 2021)

Modified

Jun 17, 2026

Description

Reflected cross-site scripting vulnerability due to insufficient verification of URL query parameters in GROWI (v4.2 Series) versions from v4.2.0 to v4.2.7 allows remote attackers to inject an arbitrary script via unspecified vectors.

Vendors: weseek
Products: growi
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.