What is CVE-2021-47844?

CVE-2021-47844 is a medium-severity vulnerability in Xmind, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2026-01-16.

How severe is CVE-2021-47844?

Medium severity. CVSS v3 base score is 6.1 out of 10.

XSS in Xmind

CVE-2021-47844

Xmind 2020 contains a cross-site scripting vulnerability that allows attackers to inject malicious payloads into mind mapping files or custom headers. Attackers can craft malicious files with embedded JavaScript that execute system command…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.000 (7.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Xmind — versions 2020

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

ExploitDB-49827 (exploit)
Official Xmind Product Homepage (product)
Proof of Concept Video (exploit)
VulnCheck Advisory: Xmind 2020 - Persistent Cross-Site Scripting (third-party-advisory)

Frequently asked questions

What is CVE-2021-47844?: CVE-2021-47844 is a medium-severity vulnerability in Xmind, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2026-01-16.
How severe is CVE-2021-47844?: Medium severity. CVSS v3 base score is 6.1 out of 10.