CVE-2021-27309: Csphere Clansphere

Medium severity, CVSS 6.1. EPSS: 2% chance of exploitation in the next 30 days.

Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "module" parameter.

Affected products

• Csphere Clansphere: version 2011.4 only

Published 2021-03-23. Last modified 2026-06-17.