Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2021-32857

Cockpit vulnerable to Cross-site Scripting

Description

Cockpit is a content management system that allows addition of content management functionality to any site. In versions 0.12.2 and prior, bad HTML sanitization in `htmleditor.js` may lead to cross-site scripting (XSS) issues. There are no known patches for this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

microweber microweber

  • 0.12.2 to ≤ 0.12.2affected

References