CVE-2021-32616: 1cdn Project 1cdn

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

1CDN is open-source file sharing software. In 1CDN before commit f88a2730fa50fc2c2aeab09011f6f142fd90ec25, there is a basic cross-site scripting vulnerability that allows an attacker to inject /<script>//code</script> and execute JavaScript code on the client side.

Affected products

• 1cdn Project 1cdn: before 2021-05-16 (fixed in 2021-05-16)

Published 2021-05-28. Last modified 2026-06-17.