CVE-2021-32858

MEDIUM 6.1CVE-2021-32858 · Published 21/02/2023 · updated 17/06/2026

In short

CVE-2021-32858 is a MEDIUM (CVSS 6.1) vulnerability affecting esdoc-publish-html-plugin (esdoc).
Chance of exploitation in the next 30 days (EPSS): 0.55%, higher than 46.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
esdoc-publish-html-plugin esdoc	`≤ 1.1.2`	No fix yet

Description

esdoc-publish-html-plugin is a plugin for the document maintenance software ESDoc. TheHTML sanitizer in esdoc-publish-html-plugin 1.1.2 and prior can be bypassed which may lead to cross-site scripting (XSS) issues. There are no known patches for this issue.

References

esdoc/esdoc-plugins · Patch
securitylab.github.com/advisories/GHSL-2021-1034_esdoc-publish-html-plugin · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free