Lucene search
+L

10 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 6:34 p.m.•17 views

CVE-2021-32858

esdoc-publish-html-plugin is a plugin for the document maintenance software ESDoc. TheHTML sanitizer in esdoc-publish-html-plugin 1.1.2 and prior can be bypassed which may lead to cross-site scripting XSS issues. There are no known patches for this issue...

6.1CVSS5.9AI score0.00553EPSS
SaveExploits1
Veracode
Veracode
•added 2023/02/23 4:12 a.m.•35 views

Cross-site Scripting (XSS)

esdoc-publish-html-plugin is vulnerable to Cross-site Scripting XSS. The vulnerability exists because the markdown function in util.js does not properly remove HTML comments, allowing an attacker to inject and execute malicious HTML content such as through the tag parameter...

6.1CVSS6.1AI score0.00553EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2023/02/21 3:15 p.m.•11 views

CVE-2021-32858

esdoc-publish-html-plugin is a plugin for the document maintenance software ESDoc. TheHTML sanitizer in esdoc-publish-html-plugin 1.1.2 and prior can be bypassed which may lead to cross-site scripting XSS issues. There are no known patches for this issue...

6.1CVSS5.6AI score0.00553EPSS
SaveExploits1References2
NVD
NVD
•added 2023/02/21 3:15 p.m.•25 views

CVE-2021-32858

esdoc-publish-html-plugin is a plugin for the document maintenance software ESDoc. TheHTML sanitizer in esdoc-publish-html-plugin 1.1.2 and prior can be bypassed which may lead to cross-site scripting XSS issues. There are no known patches for this issue...

6.1CVSS6AI score0.00553EPSS
SaveExploits1References2
Prion
Prion
•added 2023/02/21 3:15 p.m.•20 views

Cross site scripting

esdoc-publish-html-plugin is a plugin for the document maintenance software ESDoc. TheHTML sanitizer in esdoc-publish-html-plugin 1.1.2 and prior can be bypassed which may lead to cross-site scripting XSS issues. There are no known patches for this issue...

5.8CVSS5.9AI score0.00553EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2023/02/21 12:00 a.m.•11 views

ESDoc Plugins esdoc-publish-html-plugin 跨站脚本漏洞

ESDoc Plugins is ESDoc open source an official plugin for ESDoc . ESDoc Plugins esdoc-publish-html-plugin 1.1.2 and earlier versions have a security vulnerability , the vulnerability stems from the vulnerability to cross-site scripting XSS attacks...

6.1CVSS5.9AI score0.00553EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/20 12:00 a.m.•3 views

CVE-2021-32858: Improper Neutralization of Input During Web Page Generation

esdoc-publish-html-plugin is a plugin for the document maintenance software ESDoc. TheHTML sanitizer in esdoc-publish-html-plugin 1.1.2 and prior can be bypassed which may lead to cross-site scripting XSS issues. There are no known patches for this issue...

6.1CVSS5.6AI score0.00553EPSS
SaveExploits1References3
CVE
CVE
•added 2023/02/20 12:00 a.m.•62 views

CVE-2021-32858

CVE-2021-32858 affects esdoc-publish-html-plugin (ESDoc ecosystem). The HTML sanitizer in versions 1.1.2 and earlier can be bypassed, potentially enabling cross-site scripting (XSS). There are no known patches reported. This is the primary technical detail across connected sources; no exploit det...

6.1CVSS6AI score0.00553EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/02/20 12:00 a.m.•10 views

CVE-2021-32858 esdoc-publish-html-plugin vulnerable to Cross-site Scripting

esdoc-publish-html-plugin is a plugin for the document maintenance software ESDoc. TheHTML sanitizer in esdoc-publish-html-plugin 1.1.2 and prior can be bypassed which may lead to cross-site scripting XSS issues. There are no known patches for this issue...

6.1CVSS6.2AI score0.00553EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/02/20 12:00 a.m.•14 views

PT-2023-12190 · Unknown · Esdoc-Publish-Html-Plugin

Name of the Vulnerable Software and Affected Versions: esdoc-publish-html-plugin versions 1.1.2 and prior Description: The HTML sanitizer in esdoc-publish-html-plugin can be bypassed, potentially leading to cross-site scripting XSS issues. There are no known patches for this issue. Recommendation...

6.1CVSS5.9AI score0.00553EPSS
SaveExploits1References4
Rows per page
Query Builder