CVE-2021-32857

Cockpit is a content management system that allows addition of content management functionality to any site. In versions 0.12.2 and prior, bad HTML sanitization in htmleditor.js may lead to cross-site scripting XSS issues. There are no known patches for this issue...

CVE-2021-32857

CVE-2021-32857 affects Cockpit versions 0.12.2 and earlier. The issue arises from improper HTML sanitization in the file htmleditor.js, enabling cross-site scripting (XSS). The available documents do not indicate a public patch; several sources reiterate that no fixes are known. A vendor/workarou...