← Database

CVE-2021-41563

MEDIUM CVSS: 6.1 Published: 2021-10-08 Modified: 2026-06-17

Description

Tad Book3 editing book function does not filter special characters. Unauthenticated attackers can remotely inject JavaScript syntax and execute stored XSS attacks.

Affected Platforms

Tad Book3 Project Tad Book3

Weakness Type

CWE-79, CWE-79

References