CVE-2021-41563 - Tad Book3 - Stored XSS

Back Back to CVE browser

MEDIUM

Tad Book3 - Stored XSS

Published Oct 8, 2021

6.1

MEDIUM

CVSS 3.1

EPSS 0.63%

Description

Tad Book3 editing book function does not filter special characters. Unauthenticated attackers can remotely inject JavaScript syntax and execute stored XSS attacks.

Affected products

Vendor Tad Product Tad Book3 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=3.89

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Tad

Tad Book3

n/a

Version	Status	Constraints
0	affected	<=3.89

Remediation

Vendor solution

Update Tad Book3 version to 3.9

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-28579
Advisory
https://www.twcert.org.tw/tw/cp-132-5167-2defb-1.html
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-28579		Advisory
https://www.twcert.org.tw/tw/cp-132-5167-2defb-1.html		x_refsource_MISCThird Party Advisory