medium6.1
CVE-2021-41467
Cross-site scripting in application/controllers/dropbox.php in JustWriting
Impact
Cross-site scripting (XSS) vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | hjue/justwriting | <= 1.0.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Justwriting Project | Justwriting | Version 1.0.0 |