0.8.3

DATE	CVE	VULNERABILITY TITLE	RISK
2021-05-25	CVE-2021-27821	Cross-site Scripting vulnerability in Openwrt Luci The Web Interface for OpenWRT LuCI version 19.07 and lower has been discovered to have a cross-site scripting vulnerability which can lead to attackers carrying out arbitrary code execution. network low complexity openwrt CWE-79	6.1
2019-05-23	CVE-2019-12272	OS Command Injection vulnerability in Openwrt Luci In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and admin/status/realtime/wireless_status of the web application are affected by a command injection vulnerability. network low complexity openwrt CWE-78 critical	9.8