CVE-2021-29271

2021-03-2717:57:06

mitre

www.cve.org

remark42

version 1.6.1

xss vulnerability

EPSS

0.001

Percentile

29.3%

JSON

remark42 before 1.6.1 allows XSS, as demonstrated by “Locator: Locator{URL:” followed by an XSS payload. This is related to backend/app/store/comment.go and backend/app/store/service/service.go.

References

github.com/umputun/remark42/compare/v1.6.0...v1.6.1

vuln.ryotak.me/advisories/19

EPSS

0.001

Percentile

29.3%

JSON

Related for CVELIST:CVE-2021-29271