CVE-2021-27821: Openwrt Luci

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

The Web Interface for OpenWRT LuCI version 19.07 and lower has been discovered to have a cross-site scripting vulnerability.

Affected products

• Openwrt Luci: up to and including 19.07.0

Published 2021-05-25. Last modified 2026-07-09.