CVE-2021-20721: Kujirahand Konawiki

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors. If the file contains PHP scripts, arbitrary code may be executed.

Affected products

• Kujirahand Konawiki: before 2.2.4 (fixed in 2.2.4)

Published 2021-05-20. Last modified 2026-06-17.