Lucene search
PRIOn knowledge basePRION:CVE-2021-29272HistoryMar 27, 2021 - 6:15 p.m.
Design/Logic Flaw
2021-03-2718:15:00
PRIOn knowledge base
www.prio-n.com
6
0.001 Low
EPSS
Percentile
29.5%
bluemonday before 1.0.5 allows XSS because certain Go lowercasing converts an uppercase Cyrillic character, defeating a protection mechanism against the “script” string.
| CPE | Name | Operator | Version |
|---|---|---|---|
| bluemonday | lt | 1.0.5 |
Related
cve
cve
CVE-2021-29272
2021-03-27 18:15:13
nvd
nvd
CVE-2021-29272
2021-03-27 18:15:13
redhatcve
redhatcve
CVE-2021-29272
2021-03-29 18:02:59
veracode
veracode
Cross-site Scripting (XSS)
2021-03-29 04:20:50
alpinelinux
alpinelinux
CVE-2021-29272
2021-03-27 18:15:13
github
github
Cross-site scripting in bluemonday
2021-05-18 21:07:37
ubuntucve
ubuntucve
CVE-2021-29272
2021-03-27 00:00:00
osv
osv
Cross-site scripting due to incorrect sanitization in github.com/microcosm-cc/bluemonday
2021-05-18 21:07:37
Cross-site scripting in bluemonday
2021-05-18 21:07:37
CVE-2021-29272
2021-03-27 18:15:13
cvelist
cvelist
CVE-2021-29272
2021-03-27 17:57:28