Search vulnerabilities

Results 2

Export CSV
CVE-2021-41974

Tad Book3 - Improper Authorization

Tad Book3 editing book page does not perform identity verification. Remote attackers can use the vulnerability to view and modify arbitrary content of books without permission.

CVSS 3.1 · 9.1 Critical EPSS 1.3% KEV · Not listed
Products
CVE-2021-41563

Tad Book3 - Stored XSS

Tad Book3 editing book function does not filter special characters. Unauthenticated attackers can remotely inject JavaScript syntax and execute stored XSS attacks.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Products