CVE-2021-26938: Henriquedornas

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

A stored XSS issue exists in henriquedornas 5.2.17 via online live chat. NOTE: Third parties report that no such product exists. That henriquedornas is the web design agency and 5.2.17 is simply the PHP version running on this hosts

Affected products

• Henriquedornas Henriquedornas: version 5.2.17 only

Published 2021-02-10. Last modified 2026-06-17.