CVE-2021-3395: Pryaniki

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability in Pryaniki 6.44.3 allows remote authenticated users to upload an arbitrary file. The JavaScript code will execute when someone visits the attachment.

Affected products

• Pryaniki Pryaniki: version 6.44.3 only

Published 2021-02-02. Last modified 2026-06-17.