CVE-2021-3768

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Sep 6, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-376805.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of fully connected layers in CVE-2021-376817.8TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of SVDF in TFLite is [vulneraCVE-2021-376827.1TensorFlow is an end-to-end open source platform for machine learning. In affected versions all TFLite operations that use quantization can CVE-2021-376835.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of division in TFLite is [vulCVE-2021-376845.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementations of pooling in TFLite are vulCVE-2021-376855.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's [`expand_dims.cc`](https://github.com/tCVE-2021-376865.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions the strided slice implementation in TFLite has aCVE-2021-376875.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's [`GatherNd` implementation](https://gitCVE-2021-376885.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLite model that would CVE-2021-376895.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLite model that would CVE-2021-37699.8# Vulnerability in `pygmalion`, `pygmalion-virtualenv` and `refined` themes **Description**: these themes use `print -P` on user-supplied stCVE-2021-376906.6TensorFlow is an end-to-end open source platform for machine learning. In affected versions when running shape functions, some functions (su
CVE-2021-3768: Medium severity, CVSS 5.4 | Vulnix