Description Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function. Remediation References CVE-2021-23337 Related Vulnerabilities WordPress Plugin GamiPress-The most flexible and powerful gamification for WordPress Multiple Vulnerabilities (2.5.6) Drupal Core 6.x Cross-Site Scripting (6.0 - 6.11) Moodle Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2024-25983) WordPress Plugin Unconfirmed Cross-Site Scripting (1.2.3) Drupal Core 9.3.x Security Bypass (9.3.0 - 9.3.8) Severity High Classification CVE-2021-23337 CWE-138 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities