Lucene search

K
osvGoogleOSV:CVE-2021-34817
HistoryJul 19, 2021 - 2:15 p.m.

CVE-2021-34817

2021-07-1914:15:08
Google
osv.dev
4
cve-2021-34817
cross-site scripting
etherpad
remote attackers
crafted pad

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

56.3%

A Cross-Site Scripting (XSS) issue in the chat component of Etherpad 1.8.13 allows remote attackers to inject arbitrary JavaScript or HTML by importing a crafted pad.

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

56.3%

Related for OSV:CVE-2021-34817