CVE-2021-41663

MediumCVSS 6.1

Published: 13/06/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.73%

50th percentile - higher than 50% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability exists in Mini CMS V1.11. The vulnerability is located on the post-edit.php page during article upload.

Risk Assessment

An attacker can inject a malicious script that executes in the administrator's browser, potentially leading to session hijacking, defacement, or data theft.

Recommendation

Update Mini CMS to the latest version or apply a security patch. Additionally, implement input filtering and encoding on the post-edit.php page.

Original NVD description (English source)

A cross-site scripting (XSS) vulnerability exists in Mini CMS V1.11. The vulnerability exists in the article upload: post-edit.php page.