CVE-2021-34816: Etherpad

High severity, CVSS 7.2. EPSS: 2.2% chance of exploitation in the next 30 days.

An Argument Injection issue in the plugin management of Etherpad 1.8.13 allows privileged users to execute arbitrary code on the server by installing plugins from an attacker-controlled source.

Affected products

• Etherpad Etherpad: version 1.8.13 only

Published 2021-07-21. Last modified 2026-06-17.