VULNERABILITY INTELLIGENCE

CVE-2021-31635

CVSS score9.8 CRITICAL

EPSS probability1.31%

CISA KEVNot currently listed

Published2023-06-26

Last modified2026-06-17

Description

A vulnerability in the HTML editor of Slab Quill 4.8.0 allows an attacker to execute arbitrary JavaScript by storing an XSS payload (a crafted onloadstart attribute of an IMG element) in a text field. Note: Researchers have claimed that this issue is not within the product itself, but is intended behavior in a web browser