CVE-2021-27513: EyesOfNetwork

High severity, CVSS 8.8. EPSS: 28.4% chance of exploitation in the next 30 days.

The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload arbitrary .xml.php files because it relies on "le filtre userside."

Affected products

• EyesOfNetwork EyesOfNetwork: version 5.3-10 only

Published 2021-02-22. Last modified 2026-06-17.