CVE-2021-41563

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Tad Book3 editing book function does not filter special characters. Unauthenticated attackers can remotely inject JavaScript syntax and execute stored XSS attacks.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Tad	Tad Book3	<= 3.89

References

https://www.twcert.org.tw/tw/cp-132-5167-2defb-1.htmlThird Party Advisory
https://www.twcert.org.tw/tw/cp-132-5167-2defb-1.htmlThird Party Advisory

Timeline

Published: Oct 8, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-415646.5Tad Honor viewing book list function is vulnerable to authorization bypass, thus remote attackers can use special parameters to delete artic CVE-2021-415656.1TadTools special page parameter does not properly restrict the input of specific characters, thus remote attackers can inject JavaScript syn CVE-2021-415669.8The file extension of the TadTools file upload function fails to filter, thus remote attackers can upload any types of files and execute arb CVE-2021-415676.1The new add subject parameter of Tad Uploader view book list function fails to filter special characters. Unauthenticated attackers can remo CVE-2021-415686.5Tad Web is vulnerable to authorization bypass, thus remote attackers can exploit the vulnerability to use the original function of viewing b CVE-2021-415697.5SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library (included by default) in the appstart.sas file, allo CVE-2021-41578.0An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way users use mirroring (repl CVE-2021-415705.4Veritas NetBackup OpsCenter Analytics 9.1 allows XSS via the NetBackup Master Server Name, Display Name, NetBackup User Name, or NetBackup P CVE-2021-415716.5In Apache Pulsar it is possible to access data from BookKeeper that does not belong to the topics accessible by the authenticated user. The CVE-2021-415736.5Hitachi Content Platform Anywhere (HCP-AW) 4.4.5 and later allows information disclosure. If authenticated user creates a link to a file or CVE-2021-415787.8mySCADA myDESIGNER 8.20.0 and below allows Directory Traversal attacks when importing project files. If an attacker can trick a victim into CVE-2021-415797.8LCDS LAquis SCADA through 4.3.1.1085 is vulnerable to a control bypass and path traversal. If an attacker can get a victim to load a malicio