CVE-2021-42053

🗓️ 07 Oct 2021 05:21:05Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 117 Views🌐 WEB

The Unicorn framework for Django allows XSS via component.nam

Reporter	Title	Published	Views	Family All 19
0day.today	django-unicorn 0.35.3 - Stored Cross-Site Scripting Vulnerability	8 Oct 202100:00	–	zdt
ATTACKERKB	CVE-2021-42053	7 Oct 202106:15	–	attackerkb
Circl	CVE-2021-42053	7 Oct 202112:33	–	circl
CNNVD	Django 跨站脚本漏洞	7 Oct 202100:00	–	cnnvd
CNVD	Django Cross-Site Scripting Vulnerability (CNVD-2022-31939)	10 Oct 202100:00	–	cnvd
Cvelist	CVE-2021-42053	7 Oct 202105:21	–	cvelist
Exploit DB	django-unicorn 0.35.3 - Stored Cross-Site Scripting (XSS)	8 Oct 202100:00	–	exploitdb
EUVD	EUVD-2021-0058	7 Oct 202500:30	–	euvd
Github Security Blog	Cross-site scripting in Unicorn framework	12 Oct 202117:51	–	github
NVD	CVE-2021-42053	7 Oct 202106:15	–	nvd

NVD

Node

django-unicorn unicornRange≤0.35.3django

Source	Link
github	www.github.com/adamghill/django-unicorn/pull/288/files
github	www.github.com/adamghill/django-unicorn/compare/0.35.3...0.36.0
packetstormsecurity	www.packetstormsecurity.com/files/164442/django-unicorn-0.35.3-Cross-Site-Scripting.html

Parameter	Position	Path	Description	CWE
actionQueue[].payload.value	nested	/unicorn/message/todo	Stored XSS via AJAX request payload in unicorn framework (CVE-2021-42053)	CWE-79
data.tasks[]	nested	/unicorn/message/todo	Stored XSS via AJAX request payload in unicorn framework (CVE-2021-42053)	CWE-79

17 Jun 2026 04:09Current

5.2Medium risk

Vulners AI Score5.2

CVSS 23.5

CVSS 3.15.4

EPSS0.02524

unicorn framework django xss component.name cve-2021-42053 nvd