Stored Cross-Site Scripting Vulnerability in Wekan by Wekan

CVE-2021-20654

What is CVE-2021-20654?

Wekan, an open-source kanban board system, is exposed to multiple stored cross-site scripting vulnerabilities across various versions, specifically from 3.12 to 4.11. Dubbed 'Fieldbleed,' this vulnerability allows attackers to inject malicious scripts that can be executed in the context of an end user's session, potentially compromising sensitive information or user interactions. Continuous monitoring and timely updates are essential to mitigate the risks associated with these vulnerabilities.

References