CVE-2021-20654: Wekan Project Wekan

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

Wekan, open source kanban board system, between version 3.12 and 4.11, is vulnerable to multiple stored cross-site scripting. This is named 'Fieldbleed' in the vendor's site.

Affected products

• Wekan Project Wekan: from 3.12, up to and including 4.11

Published 2021-02-10. Last modified 2026-06-17.