CVE-2021-27308: 4homepages 4images

Medium severity, CVSS 4.8. EPSS: 2% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to inject JavaScript via the "redirect" parameter.

Affected products

• 4homepages 4images: version 1.8 only

Published 2021-03-22. Last modified 2026-06-17.