What’s Vulnerable › Vulnerabilities

CVE-2021-31676

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-07-06 · updated 2026-06-17
• Weakness: CWE-79

Description

A reflected XSS was discovered in PESCMS-V2.3.3. When combined with CSRF in the same file, they can cause bigger destruction.

Affected products

• Pescms Team: 2.3.3

References

• https://github.com/RO6OTXX/pescms_vulnerability
• https://github.com/lazyphp/PESCMS-TEAM/issues/7
• https://github.com/two-kisses/pescms_vulnerability%2C
• https://github.com/RO6OTXX/pescms_vulnerability
• https://github.com/lazyphp/PESCMS-TEAM/issues/7
• https://github.com/two-kisses/pescms_vulnerability%2C

Get alerted when CVE-2021-31676 or the next vulnerability affects your stack