CVE-2021-4035: Wocu-Monitoring Wocu Monitoring

Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A stored cross site scripting have been identified at the comments in the report creation due to an obsolote version of tinymce editor. In order to exploit this vulnerability, the attackers needs an account with enough privileges to view and edit reports.

Affected products

• Wocu-Monitoring Wocu Monitoring: from 0.27, before 48.2 (fixed in 48.2)

Published 2022-02-11. Last modified 2026-06-17.