Lucene search
GoogleOSV:CVE-2021-41261HistoryDec 16, 2021 - 7:15 p.m.
CVE-2021-41261
2021-12-1619:15:08
Google
osv.dev
2
galette
membership management
cross site scripting
preferences footer
admin
gplv3
vulnerability
update
Galette is a membership management web application built for non profit organizations and released under GPLv3. Versions prior to 0.9.6 are subject to stored cross site scripting attacks via the preferences footer. The preference footer can only be altered by a site admin. This issue has been resolved in the 0.9.6 release and all users are advised to upgrade. There are no known workarounds.
Related
cve
cve
CVE-2021-41261
2021-12-16 19:15:08
cnvd
cnvd
Galette Cross-Site Scripting Vulnerability (CNVD-2021-101699)
2021-12-19 00:00:00
cvelist
cvelist
CVE-2021-41261 Stored Cross-site Scripting in Galette
2021-12-16 18:10:22
nvd
nvd
CVE-2021-41261
2021-12-16 19:15:08
ubuntucve
ubuntucve
CVE-2021-41261
2021-12-16 00:00:00
prion
prion
Cross site scripting
2021-12-16 19:15:00