VULNERABILITY INTELLIGENCE

CVE-2021-41565

CVSS score6.1 MEDIUM
EPSS probability0.75%
CISA KEVNot currently listed
Published2021-10-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

TadTools special page parameter does not properly restrict the input of specific characters, thus remote attackers can inject JavaScript syntax without logging in, and further perform reflective XSS attacks.

Weakness classification

  • twcert@cert.org.tw: CWE-79
  • nvd@nist.gov: CWE-79

Primary references