2 matches found
CVE-2021-3271
PressBooks 5.17.3 contains a cross-site scripting XSS. Stored XSS can be submitted via the Book Info's Long Description Body, and all actions to open or preview the books page will result in the triggering the stored XSS...
CVE-2021-3271
PressBooks 5.17.3 is affected by a stored cross-site scripting (XSS) vulnerability. The CVE-2021-3271 entry describes that a crafted long description in the Book Info can trigger stored XSS when users open or preview a book page. Multiple connected sources (Red Hat advisory, OSV, CNVD, and CVE re...