CVE-2021-41175

MEDIUM 5.4CVE-2021-41175 · Published 26/10/2021 · updated 17/06/2026

In short

CVE-2021-41175 is a MEDIUM (CVSS 5.4) vulnerability affecting web interface (pi-hole).
Chance of exploitation in the next 30 days (EPSS): 0.90%, higher than 59.7% of all vulnerabilities.
Fix: update to 5.8 or later.

Package	Affected versions	Patched versions
web interface pi-hole	`< 5.8`	`5.8`

Description

Pi-hole's Web interface (based on AdminLTE) provides a central location to manage one's Pi-hole and review the statistics generated by FTLDNS. Prior to version 5.8, cross-site scripting is possible when adding a client via the groups-clients management page. This issue was patched in version 5.8.

References

pi-hole/AdminLTE commit 01191c7 · Patch
pi-hole/AdminLTE release v5.8 · Release Notes
pi-hole/AdminLTE security advisory · Exploit

More vulnerabilities in web interface

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

web interface

pi-hole

< 5.8

5.8

More vulnerabilities in web interface

See all →