What’s Vulnerable › Vulnerabilities

CVE-2021-31677

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-07-06 · updated 2026-06-17
• Weakness: CWE-352

Description

An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can modify admin and other members' passwords.

Affected products

• Pescms Team: 2.3.3

References

• https://github.com/RO6OTXX/pescms_vulnerability
• https://github.com/lazyphp/PESCMS-TEAM/issues/7%2C
• https://github.com/two-kisses/pescms_vulnerability%2C
• https://github.com/RO6OTXX/pescms_vulnerability
• https://github.com/lazyphp/PESCMS-TEAM/issues/7%2C
• https://github.com/two-kisses/pescms_vulnerability%2C

Get alerted when CVE-2021-31677 or the next vulnerability affects your stack