CVE-2021-3021: Ispconfig

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

ISPConfig before 3.2.2 allows SQL injection.

Affected products

• Ispconfig Ispconfig: before 3.2.2 (fixed in 3.2.2)

Published 2021-01-05. Last modified 2026-06-17.