CVE-2021-32441: Exponentcms Exponent CMS

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

SQL Injection vulnerability in Exponent-CMS v.2.6.0 fixed in 2.7.0 allows attackers to gain access to sensitive information via the selectValue function in the expConfig class.

Affected products

• Exponentcms Exponent CMS: from 2.6.0, before 2.7.0 (fixed in 2.7.0)

Published 2023-02-17. Last modified 2026-06-17.