Medium severity5.4NVD Advisory· Published Jul 30, 2021· Updated Jun 17, 2026
CVE-2021-36605
CVE-2021-36605
Description
engineercms 1.03 is vulnerable to Cross Site Scripting (XSS). There is no escaping in the nickname field on the user list page. When viewing this page, the JavaScript code will be executed in the user's browser.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- engineercms/engineercmsdescription
- Range: = 1.03
Patches
Vulnerability mechanics
References
1- github.com/3xxx/engineercms/issues/52nvdExploitIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.