Cross site scripting

2021-05-2709:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

34.7%

JSON

Cross-site scripting vulnerability in Zettlr from 0.20.0 to 1.8.8 allows an attacker to execute an arbitrary script by loading a file or code snippet containing an invalid iframe into Zettlr.

CPENameOperatorVersion
zettlrge0.20.0
zettlrle1.8.8

CPE	Name	Operator	Version
	zettlr	ge	0.20.0
	zettlr	le	1.8.8

References

github.com/Zettlr/Zettlr

jvn.jp/en/jp/JVN98239374/index.html

www.zettlr.com/

0.001 Low

EPSS

Percentile

34.7%

JSON

Related for PRION:CVE-2021-20727