CVE-2021-33396: Baijiacms Project Baijiacms

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Cross Site Request Forgery (CSRF) vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php.

Affected products

• Baijiacms Project Baijiacms: version 4.1.4 only

Published 2023-02-15. Last modified 2026-06-17.