Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2021-47843

Tagstoo 2.0.1 - Stored XSS to RCE

Description

Tagstoo 2.0.1 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious payloads through files or custom tags. Attackers can execute arbitrary JavaScript code to spawn system processes, access files, and perform remote code execution on the victim's computer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tagstoo Tagstoo

  • 2.0.1affected

References