Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2021-4170

Cross-site Scripting (XSS) - Stored in janeczku/calibre-web

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
@huntrdev

Description

calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

janeczku janeczku/calibre-web

  • unspecified to < 0.6.15affected

References