Lucene search
GoogleOSV:CVE-2021-25975HistoryNov 10, 2021 - 11:15 a.m.
CVE-2021-25975
2021-11-1011:15:09
Google
osv.dev
8
publify version vulnerability xss file upload
EPSS
0.001
Percentile
19.4%
In publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS as a result of an unrestricted file upload. This issue allows a user with “publisher” role to inject malicious JavaScript via the uploaded html file.
Related
osv
osv
BIT-publify-2021-25975
2024-03-06 11:04:20
Cross site scripting in publify
2022-05-24 22:28:08
CVE-2021-25974
2021-11-10 11:15:07
cvelist
cvelist
rubygems
rubygems
Cross site scripting in publify
2022-05-23 21:00:00
Cross site scripting in publify
2022-05-23 21:00:00
nvd
nvd
CVE-2021-25974
2021-11-10 11:15:07
CVE-2021-25975
2021-11-10 11:15:09
cve
cve
CVE-2021-25974
2021-11-10 11:15:07
CVE-2021-25975
2021-11-10 11:15:09
github
github
Cross site scripting in publify
2022-05-24 22:28:08
Cross site scripting in publify
2022-05-24 22:29:03
prion
prion
Unrestricted file upload
2021-11-10 11:15:00
Design/Logic Flaw
2021-11-10 11:15:00
veracode
veracode
Cross-site Scripting (XSS)
2021-11-11 10:52:56
Cross-site Scripting (XSS)
2021-11-11 04:13:52