CVE-2021-40868: Cloudron

Medium severity, CVSS 6.1. EPSS: 9.1% chance of exploitation in the next 30 days.

In Cloudron 6.2, the returnTo parameter on the login page is vulnerable to Reflected XSS.

Affected products

• Cloudron Cloudron: version 6.2 only

Published 2021-09-21. Last modified 2026-06-17.