VULNERABILITY INTELLIGENCE

CVE-2021-33850

CVSS score5.4 MEDIUM
EPSS probability1.60%
CISA KEVNot currently listed
Published2021-11-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

There is a Cross-Site Scripting vulnerability in Microsoft Clarity version 0.3. The XSS payload executes whenever the user changes the clarity configuration in Microsoft Clarity version 0.3. The payload is stored on the configuring project Id page.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references