CVE-2021-3010: Opentext Content Server

Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days.

There are multiple persistent cross-site scripting (XSS) vulnerabilities in the web interface of OpenText Content Server Version 20.3. The application allows a remote attacker to introduce arbitrary JavaScript by crafting malicious form values that are later not sanitized.

Affected products

• Opentext Content Server: version 20.3 only

Published 2021-02-26. Last modified 2026-06-17.