CVE-2021-20749: Nendeb Fudousan Plugin

Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in Fudousan plugin ver5.7.0 and earlier, Fudousan Plugin Pro Single-User Type ver5.7.0 and earlier, and Fudousan Plugin Pro Multi-User Type ver5.7.0 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.

Affected products

• Nendeb Fudousan Plugin: up to and including 5.7.0
• Nendeb Fudousan Plugin Pro Multi-User: up to and including 5.7.0
• Nendeb Fudousan Plugin Pro Single-User: up to and including 5.7.0

Published 2021-06-28. Last modified 2026-06-17.