CVE-2021-20745: Inkdrop

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

Inkdrop versions prior to v5.3.1 allows an attacker to execute arbitrary OS commands on the system where it runs by loading a file or code snippet containing an invalid iframe into Inkdrop.

Affected products

• Inkdrop Inkdrop: before 5.3.1 (fixed in 5.3.1)

Published 2021-06-28. Last modified 2026-06-17.