CVE-2021-41565

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

TadTools special page parameter does not properly restrict the input of specific characters, thus remote attackers can inject JavaScript syntax without logging in, and further perform reflective XSS attacks.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Tad	TadTools	<= 3.2.1

References

https://www.twcert.org.tw/tw/cp-132-5169-327ef-1.htmlThird Party Advisory
https://www.twcert.org.tw/tw/cp-132-5169-327ef-1.htmlThird Party Advisory

Timeline

Published: Oct 8, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-415669.8The file extension of the TadTools file upload function fails to filter, thus remote attackers can upload any types of files and execute arb CVE-2021-415676.1The new add subject parameter of Tad Uploader view book list function fails to filter special characters. Unauthenticated attackers can remo CVE-2021-415686.5Tad Web is vulnerable to authorization bypass, thus remote attackers can exploit the vulnerability to use the original function of viewing b CVE-2021-415697.5SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library (included by default) in the appstart.sas file, allo CVE-2021-41578.0An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way users use mirroring (repl CVE-2021-415705.4Veritas NetBackup OpsCenter Analytics 9.1 allows XSS via the NetBackup Master Server Name, Display Name, NetBackup User Name, or NetBackup P CVE-2021-415716.5In Apache Pulsar it is possible to access data from BookKeeper that does not belong to the topics accessible by the authenticated user. The CVE-2021-415736.5Hitachi Content Platform Anywhere (HCP-AW) 4.4.5 and later allows information disclosure. If authenticated user creates a link to a file or CVE-2021-415787.8mySCADA myDESIGNER 8.20.0 and below allows Directory Traversal attacks when importing project files. If an attacker can trick a victim into CVE-2021-415797.8LCDS LAquis SCADA through 4.3.1.1085 is vulnerable to a control bypass and path traversal. If an attacker can get a victim to load a malicio CVE-2021-41586.0A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to cr CVE-2021-415805.3The passport-oauth2 package before 1.6.1 for Node.js mishandles the error condition of failure to obtain an access token. This is exploitabl