CVE-2021-27695

MEDIUM 6.1CVE-2021-27695 · Published 15/03/2021 · updated 09/07/2026

In short

CVE-2021-27695 is a MEDIUM (CVSS 6.1) vulnerability affecting openmaint (openmaint).
Chance of exploitation in the next 30 days (EPSS): 3.0%, higher than 87.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
openmaint openmaint	`= 2.1-3.3-b`	No fix yet

Description

Multiple stored cross-site scripting (XSS) vulnerabilities in openMAINT 2.1-3.3-b allow remote attackers to inject arbitrary web script or HTML via any "Add" sections, such as Add Card Building & Floor, or others in the Name and Code Parameters.

References

exploit-db.com/exploits/49649 · Exploit

More vulnerabilities in openmaint

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free