CVE-2021-31274: Librenms

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

In LibreNMS < 21.3.0, a stored XSS vulnerability was identified in the API Access page due to insufficient sanitization of the $api->description variable. As a result, arbitrary Javascript code can get executed.

Affected products

• Librenms Librenms: before 21.3.0 (fixed in 21.3.0)

Published 2021-09-08. Last modified 2026-06-17.