CVE-2021-3355: Lightcms Project Lightcms

Medium severity, CVSS 5.4. EPSS: 7.3% chance of exploitation in the next 30 days.

A stored-self XSS exists in LightCMS v1.3.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/SensitiveWords.

Affected products

• Lightcms Project Lightcms: version 1.3.4 only

Published 2021-02-24. Last modified 2026-06-17.