CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-29271

remark42 before 1.6.1 allows XSS, as demonstrated by "Locator: Locator{URL:" followed by an XSS payload. This is related to backend/app/store/comment.go and backend/app/store/servi

Status: Published
Published: 2021-03-27
Updated: 2024-08-03
Assigning organization: mitre

Description

remark42 before 1.6.1 allows XSS, as demonstrated by "Locator: Locator{URL:" followed by an XSS payload. This is related to backend/app/store/comment.go and backend/app/store/service/service.go.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a n/a

n/aaffected

References

https://github.com/umputun/remark42/compare/v1.6.0...v1.6.1 ↗
https://vuln.ryotak.me/advisories/19 ↗