CVEs-PoC/2021/CVE-2021-20654.md

### [CVE-2021-20654](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20654)
![](https://img.shields.io/static/v1?label=Product&message=Wekan&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=versions%20between%203.12%20and%204.11%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%3A%20Cross-Site%20Scripting&color=brightgreen)

### Description

Wekan, open source kanban board system, between version 3.12 and 4.11, is vulnerable to multiple stored cross-site scripting. This is named 'Fieldbleed' in the vendor's site.

### POC

#### Reference
- https://jvn.jp/en/jp/JVN80785288/
- https://wekan.github.io/hall-of-fame/fieldbleed/

#### Github
No PoCs found on GitHub currently.