CVE-2021-36654

5.4 mediumEPSS 1.9%

Medium (5.4) in cmsuno project cmsuno. EPSS 1.9% chance of exploitation in the next 30 days.

CMSuno 1.7 is vulnerable to an authenticated stored cross site scripting in modifying the filename parameter (tgo) while updating the theme.

Severity

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-08-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19