CVE-2021-43737: Xiaohuanxiong Project Xiaohuanxiong CMS

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An issus was discovered in xiaohuanxiong CMS 5.0.17. There is a CSRF vulnerability that can modify administrator account's password.

Affected products

• Xiaohuanxiong Project Xiaohuanxiong CMS: version 5.0.17 only

Published 2022-03-23. Last modified 2026-06-17.