CVE-2021-37211: Larvata Flygo

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

The bulletin function of Flygo does not filter special characters while a new announcement is added. Remoter attackers can use the vulnerability with general user’s credential to inject JavaScript and execute stored XSS attacks.

Affected products

• Larvata Flygo: before 1.91.1 (fixed in 1.91.1)

Published 2021-08-09. Last modified 2026-06-17.