CVE-2021-23411: Anchorme Project Anchorme

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the main functionality. It accepts input that can result in the output (an anchor a tag) containing undesirable Javascript code that can be executed upon user interaction.

Affected products

• Anchorme Project Anchorme: any version

Published 2021-07-21. Last modified 2026-06-17.