CVE Feed

    Dashboard / CVE / CVE-2021-41086

    CVE-2021-41086

    jsuites is an open source collection of common required javascript web components. In affected versions users are subject to cross site scripting (XSS) attacks via clipboard content. jsuites is vulnerable to DOM based XSS if the user can be tricked into copying _anything_ from a malicious and pasting it into the html editor. This is because a part of the clipboard content is directly written to `innerHTML` allowing for javascript injection and thus XSS. Users are advised to update to version 4.9.11 to resolve.

    Published:Sep 21, 2021
    Last Modified:Nov 21, 2024
    EPS:Sep 21, 2021
    EPSS Score:0.00638
    CVSS Score:8.7

    Affected Products

    Vendor
    Jsuites
    Product
    Jsuites

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High