Medium severity5.4NVD Advisory· Published Jun 28, 2021· Updated Jun 17, 2026
CVE-2021-20749
CVE-2021-20749
Description
Cross-site scripting vulnerability in Fudousan plugin ver5.7.0 and earlier, Fudousan Plugin Pro Single-User Type ver5.7.0 and earlier, and Fudousan Plugin Pro Multi-User Type ver5.7.0 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:nendeb:fudousan_plugin:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:nendeb:fudousan_plugin:*:*:*:*:*:*:*:*range: <=5.7.0
- (no CPE)range: Fudousan plugin ver5.7.0 and earlier, Fudousan Plugin Pro Single-User Type ver5.7.0 and earlier, and Fudousan Plugin Pro Multi-User Type ver5.7.0 and earlier
- cpe:2.3:a:nendeb:fudousan_plugin_pro_multi-user:*:*:*:*:*:*:*:*Range: <=5.7.0
- cpe:2.3:a:nendeb:fudousan_plugin_pro_single-user:*:*:*:*:*:*:*:*Range: <=5.7.0
- Range: <=5.7.0
Patches
Vulnerability mechanics
References
3- www.nendeb-biz.jp/2021-0617-1200/nvdPatchThird Party Advisory
- jvn.jp/en/jp/JVN93799513/index.htmlnvdThird Party Advisory
- nendeb.jp/fudounvdProductThird Party Advisory
News mentions
0No linked articles in our index yet.