CVE-2021-34129

8.1 highEPSS 1.7%

High (8.1) in laiketui laiketui. EPSS 1.7% chance of exploitation in the next 30 days.

LaikeTui 3.5.0 allows remote authenticated users to delete arbitrary files, as demonstrated by deleting install.lock in order to reinstall the product in an attacker-controlled manner. This deletion is possible via directory traversal in the uploadImg, oldpic, or imgurl parameter.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2021-06-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

laiketui:laiketui

References

https://github.com/bettershop/LaikeTui/issues/9
https://github.com/bettershop/LaikeTui/issues/9

Check your stack JSON