← Database

CVE-2021-40868

MEDIUM CVSS: 6.1 Published: 2021-09-21 Modified: 2026-06-17

Description

In Cloudron 6.2, the returnTo parameter on the login page is vulnerable to Reflected XSS.

Affected Platforms

Cloudron Cloudron

Weakness Type

CWE-79

References