CVE-2021-20784: Voidtools Everything

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

HTTP header injection vulnerability in Everything version 1.0, 1.1, and 1.2 except the Lite version may allow a remote attacker to inject an arbitrary script or alter the website that uses the product.

Affected products

• Voidtools Everything: before 1.1 (fixed in 1.1); from 1.1, before 1.2 (fixed in 1.2); from 1.2, before 1.3 (fixed in 1.3)

Published 2021-07-14. Last modified 2026-06-17.