CVE-2021-41567

MEDIO 6.1CVE-2021-41567 · Published 08/10/2021 · updated 17/06/2026

In breve

CVE-2021-41567 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda tad uploader (tad uploader project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.63%, superiore al 50.5% delle vulnerabilità.
Correzione: aggiornare a 3.5.4 o successiva.

Package	Affected versions	Patched versions
tad uploader tad_uploader_project	`< 3.5.4`	`3.5.4`

Description

The new add subject parameter of Tad Uploader view book list function fails to filter special characters. Unauthenticated attackers can remotely inject JavaScript syntax and execute stored XSS attacks.

References

twcert.org.tw/tw/cp-132-5171-64439-1.html · Third Party Advisory

Altre vulnerabilità di tad uploader

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free