CVE-2021-3271 - PressBooks 5.17.3 contains a cross-site scripting (XSS)

Back Back to CVE browser

MEDIUM

PressBooks 5.17.3 contains a cross-site scripting (XSS)

Published Jan 22, 2021

4.8

MEDIUM

CVSS 3.1

EPSS 0.93%

Description

PressBooks 5.17.3 contains a cross-site scripting (XSS). Stored XSS can be submitted via the Book Info's Long Description Body, and all actions to open or preview the books page will result in the triggering the stored XSS.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (7)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-0637
Advisory
https://github.com/advisories/GHSA-9652-78hp-w58c
Advisory
https://github.com/pressbooks/pressbooks
x_refsource_MISCThird Party Advisory
https://github.com/pressbooks/pressbooks/commit/941a8c5eaeacea5eb211b54ee55bc0348139cbd8
https://github.com/pressbooks/pressbooks/pull/2072
x_refsource_MISCExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-3271
https://www.gosecure.net/blog/2021/02/16/cve-2021-3271-pressbooks-stored-cross-site-scripting-proof-of-concept/
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-0637		Advisory
https://github.com/advisories/GHSA-9652-78hp-w58c		Advisory
https://github.com/pressbooks/pressbooks		x_refsource_MISCThird Party Advisory
https://github.com/pressbooks/pressbooks/commit/941a8c5eaeacea5eb211b54ee55bc0348139cbd8
https://github.com/pressbooks/pressbooks/pull/2072		x_refsource_MISCExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-3271
https://www.gosecure.net/blog/2021/02/16/cve-2021-3271-pressbooks-stored-cross-site-scripting-proof-of-concept/		x_refsource_MISCExploitThird Party Advisory