CVE-2021-20851

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-12-01 · updated 2026-06-17
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in Browser and Operating System Finder versions prior to 1.2 allows a remote unauthenticated attacker to hijack the authentication of an administrator via unspecified vectors.

Affected products

Aftab Muni Browser and Operating System Finder: before 1.2 — fixed in 1.2

How to fix

Upgrade to a fixed version: Aftab Muni Browser and Operating System Finder 1.2. Check the vendor advisory for mitigations.

References

https://jvn.jp/en/jp/JVN93562098/index.html
https://wordpress.org/plugins/browser-and-operating-system-finder/
https://jvn.jp/en/jp/JVN93562098/index.html
https://wordpress.org/plugins/browser-and-operating-system-finder/

Get alerted when CVE-2021-20851 or the next vulnerability affects your stack