What’s Vulnerable › Vulnerabilities

CVE-2021-27961

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-07-09 · updated 2026-06-17
• Weakness: CWE-79

Description

evesys 7.1 (2152) through 8.0 (2202) allows Reflected XSS via the indexeva.php action parameter.

References

• https://evasys.de/en/blog/
• https://gist.github.com/phlmox/c24bf28f12fbc0f2ea73dd9e8cfa94e3

Get alerted when CVE-2021-27961 or the next vulnerability affects your stack