CVE-2021-29271

MEDIO 6.1CVE-2021-29271 · Published 27/03/2021 · updated 17/06/2026

In breve

CVE-2021-29271 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda remark42 (remark42).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.79%, superiore al 56.5% delle vulnerabilità.
Correzione: aggiornare a 1.6.1 o successiva.

Package	Affected versions	Patched versions
remark42 remark42	`< 1.6.1`	`1.6.1`

Description

remark42 before 1.6.1 allows XSS, as demonstrated by "Locator: Locator{URL:" followed by an XSS payload. This is related to backend/app/store/comment.go and backend/app/store/service/service.go.

References

umputun/remark42 · Patch
vuln.ryotak.me/advisories/19 · Third Party Advisory

Altre vulnerabilità di remark42

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free