CVE-2021-41567

MEDIUM 6.1CVE-2021-41567 · Published 08/10/2021 · updated 17/06/2026

In short

CVE-2021-41567 is a MEDIUM (CVSS 6.1) vulnerability affecting tad uploader (tad uploader project).
Chance of exploitation in the next 30 days (EPSS): 0.63%, higher than 50.5% of all vulnerabilities.
Fix: update to 3.5.4 or later.

Package	Affected versions	Patched versions
tad uploader tad_uploader_project	`< 3.5.4`	`3.5.4`

Description

The new add subject parameter of Tad Uploader view book list function fails to filter special characters. Unauthenticated attackers can remotely inject JavaScript syntax and execute stored XSS attacks.

References

twcert.org.tw/tw/cp-132-5171-64439-1.html · Third Party Advisory

More vulnerabilities in tad uploader

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free