CVE-2021-3271

PoC ×2—

CVSS 3.1

4.8 medium

EPSS

<1%p59

Published

Feb 18, 2021 (Feb 18, 2021)

Modified

Jun 17, 2026

Description

PressBooks 5.17.3 contains a cross-site scripting (XSS). Stored XSS can be submitted via the Book Info's Long Description Body, and all actions to open or preview the books page will result in the triggering the stored XSS.

Vendors: pressbooks
Products: pressbooks
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.