High severity8.8NVD Advisory· Published Apr 13, 2021· Updated Jun 17, 2026

CVE-2021-29054

Description

Certain Papoo products are affected by: Cross Site Request Forgery (CSRF) in the admin interface. This affects Papoo CMS Light through 21.02 and Papoo CMS Pro through 6.0.1. The impact is: gain privileges (remote).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Papoo/Papoo CMS Lightdescription
Papoo/Papoo3 versions
cpe:2.3:a:papoo:papoo:*:*:*:*:pro:*:*:*+ 2 more
- cpe:2.3:a:papoo:papoo:*:*:*:*:pro:*:*:*range: <=6.0.1
- cpe:2.3:a:papoo:papoo:*:*:*:*:light:*:*:*range: <=21.02
- (no CPE)range: <=6.0.1
Papoo/CMS Papoo Lightllm-fuzzy
Range: <=21.02

Patches

Vulnerability mechanics

References

www.papoo.de/achtung---sicherheitsfeature-bitte-aktivieren.htmlnvdPatchVendor Advisory
github.com/raginx/security/blob/main/rADV-2021-01.txtnvdThird Party Advisory
packetstormsecurity.com/files/162077/Papoo-CMS-Cross-Site-Request-Forgery.htmlnvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000