medium6.1
CVE-2021-41563
Tad Book3 editing book function does not filter special characters.
Impact
Tad Book3 editing book function does not filter special characters. Unauthenticated attackers can remotely inject JavaScript syntax and execute stored XSS attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tad Book3 Project | Tad Book3 | before 3.9 |