CVE-2021-41565

—

CVSS 3.1

6.1 medium

EPSS

<1%p53

Published

Oct 8, 2021 (Oct 8, 2021)

Modified

Jun 17, 2026

Description

TadTools special page parameter does not properly restrict the input of specific characters, thus remote attackers can inject JavaScript syntax without logging in, and further perform reflective XSS attacks.

Vendors: tadtools project
Products: tadtools
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.