CVE-2021-20681

MEDIUM · CVSS 5.4 EPSS 0.73%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-03-26 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-20681

Severity

MEDIUM

CVSS

5.4

EPSS

0.73%

Java

Original NVD Description

Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.