CVE-2021-29054: Papoo

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Certain Papoo products are affected by: Cross Site Request Forgery (CSRF) in the admin interface. This affects Papoo CMS Light through 21.02 and Papoo CMS Pro through 6.0.1. The impact is: gain privileges (remote).

Affected products

• Papoo Papoo: up to and including 6.0.1; up to and including 21.02

Published 2021-04-13. Last modified 2026-06-17.