medium5.4
CVE-2021-3767
bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Impact
bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bookstackapp | Bookstack | before 21.08.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/bookstackapp/bookstack/commit/040997fdc4414776bcac06a3cbaac3b26b5e8a64
- https://huntr.dev/bounties/7ec92c85-30eb-4071-8891-6183446ca980
- https://github.com/bookstackapp/bookstack/commit/040997fdc4414776bcac06a3cbaac3b26b5e8a64
- https://huntr.dev/bounties/7ec92c85-30eb-4071-8891-6183446ca980