CVE-2021-37366: Ctparental Project Ctparental

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

CTparental before 4.45.03 is vulnerable to cross-site request forgery (CSRF) in the CTparental admin panel. By combining CSRF with XSS, an attacker can trick the administrator into clicking a link that cancels the filtering for all standard users.

Affected products

• Ctparental Project Ctparental: before 4.45.03 (fixed in 4.45.03)

Published 2021-08-10. Last modified 2026-06-17.