What’s Vulnerable › Vulnerabilities

CVE-2020-21101

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-04-29 · updated 2026-06-17
• Weakness: CWE-79

Description

Cross Site Scriptiong vulnerabilityin Screenly screenly-ose all versions, including v1.8.2 (2019-09-25-Screenly-OSE-lite.img), in the 'Add Asset' page via manipulation of a 'URL' field, which could let a remote malicious user execute arbitrary code.

Affected products

• Screenly: 0.9, 0.9.1, 0.10, 0.11, 0.12, 0.12.1 (+9)

References

• https://github.com/Screenly/screenly-ose/issues/1254
• https://github.com/Screenly/screenly-ose/issues/1254

Get alerted when CVE-2020-21101 or the next vulnerability affects your stack